Security Advisory

CVE-2018-5848

7.8
HIGH

Vulnerability Description

In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Published Date June 12, 2018
Official Source NIST NVD Advisory