cve/2018/CVE-2018-11293.md

CVE-2018-11293

Description

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler, ndp_cfg len and num_ndp_app_info is from fw. If they are not checked, it may cause buffer over-read once the value is too large.

POC

Reference

No PoCs from references.

Github

• https://github.com/jiayy/android_vuln_poc-exp