NetSight
IP …
high7.8

CVE-2018-5848

In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly.

Impact

In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Affected products

VendorProductAffected versions
GoogleAndroid
All versions
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
DebianDebian Linux
Version 8.0

Weakness classification

CWE-119CWE-190

References