CVE-2017-14882 Information

Description

In Android for MSM Firefox OS for MSM QRD Android with all Android releases from CAF using the Linux kernel while processing VENDOR specific action frame in the function lim_process_action_vendor_specific() a comparison is performed with the incoming action frame body without validating if the action frame body received is of valid length potentially leading to an out-of-bounds access.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Reference

http://www.securityfocus.com/bid/103254 https://source.android.com/security/bulletin/2018-03-01 https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=cd10091f03f6255a47d7146eea5738f1f4ceea35

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

7.5