CVE-2017-18067 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation while processing an encrypted authentication management frame....
CriticalCVSS 9.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation while processing an encrypted authentication management frame in lim_send_auth_mgmt_frame() leads to buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | All versions | No fix listed |
References
- 103254 third-party-advisory vdb-entry
- source.android.com vendor-advisory
- source.codeaurora.org patch third-party-advisory