VULNERABILITY INTELLIGENCE

CVE-2017-15845

CVSS score7.8 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2018-01-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (negative value) from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation.

Weakness classification

  • CWE-20: Improper Input Validation
  • CWE-772: Missing Release of Resource after Effective Lifetime

Primary references