CVE-2017-14900 PUBLISHED CVSS 4.599999904632568 MEDIUM

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA_NL80211_VENDOR_SUBCMD_GET_CHAIN_RSSI vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_MAC_ADDR contains fewer than 6 bytes, a buffer overrun occurs.

EPSS 0.02% · 3.7th percentile

Risk Scores

CVSS v2.0
4.599999904632568
EPSS Score
0.02%
3.7th percentile

Affected Products

VendorProductVersions
Qualcomm, Inc.Android for MSM, Firefox OS for MSM, QRD AndroidAll Android releases from CAF using the Linux kernel
googleandroid

Timeline

References

Open in Interactive Console →