Security Advisory

CVE-2018-5850

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-06 21:00:00
Last updated 2024-09-16 18:08:46
Assigner qualcomm
CVSS score not scored
State PUBLISHED

Description

In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.