Description
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed in nl80211_set_station when user space application sends attribute NL80211_ATTR_LOCAL_MESH_POWER_MODE with data of size less than 4 bytes
Affected products
- Qualcomm, Inc. / Android for MSM, Firefox OS for MSM, QRD AndroidAll Android releases from CAF using the Linux kernel – All Android releases from CAF using the Linux kernel
References
- VENDOR_ADVISORYhttps://usn.ubuntu.com/3620-2/
- MISChttps://source.android.com/security/bulletin/pixel/2017-11-01
- VENDOR_ADVISORYhttps://usn.ubuntu.com/3620-1/