CVE-2017-15853

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level…

published April 3, 2018

CVSS
—
EPSS
0%
Percentile
27.8
In the wild
Unconfirmed
What it is

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, ptt_sock_send_msg_to_app() is invoked without validating the packet length. If the packet length is invalid, then a buffer over-read can occur.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00356 · 27.8th percentile
Published
2018-04-03T17:00Z
EPSS history
Timeline
  • 03 APR 17:00Z
    In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level…
    cvelistv5