Security Advisory
CVE-2017-15853
5.3
MEDIUM
Vulnerability Description
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, ptt_sock_send_msg_to_app() is invoked without validating the packet length. If the packet length is invalid, then a buffer over-read can occur.
Published Date
April 3, 2018
Official Source
NIST NVD Advisory