CVE-2018-3577

Description

While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Weakness classification

• CWE-190: Integer Overflow or Wraparound

Primary references

• product-security@qualcomm.com — Vendor Advisory
• product-security@qualcomm.com — Patch, Third Party Advisory
• product-security@qualcomm.com — Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory