CVE-2017-11082

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in a firmware loading routine, a buffer overflow could potentially occur if multiple user space threads try to update the WLAN firmware file through sysfs.

Score

CVSS 3.0 7.0 High

Status

Modified - product-security@qualcomm.com

Published

2018-03-16

Last modified

2024-09-16

Weaknesses

CWE-119, CWE-362

Affected products

• Android (Google)

References

• https://source.android.com/security/bulletin/pixel/2018-03-01
• https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=2d4f8cd8d11f8fb1491a20d7e316cc0fd03eeb59