CVE-2018-5848

In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly

published June 12, 2018

CVSS
—
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00346 · 27.0th percentile
Published
2018-06-12T20:00Z
EPSS history
Timeline
  • 12 JUN 20:00Z
    In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly
    cvelistv5