CVE-2017-14882

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific action frame in the function lim_process_action_vendor_specific(), a comparison is performed with the incoming action frame body without validating if the action frame body received is of valid length, potentially leading to an out-of-bounds access.

• CWE-119
• CWE-200

• http://www.securityfocus.com/bid/103254Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-03-01Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=cd10091f03f6255a47d7146eea5738f1f4ceea35Patch, Third Party Advisory
• http://www.securityfocus.com/bid/103254Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-03-01Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=cd10091f03f6255a47d7146eea5738f1f4ceea35Patch, Third Party Advisory

Published

Mar 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14877While the IPA driver in Android for MSM, Firefox OS for MSM,…
• CVE-2017-14878In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-14879In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-1488An undisclosed vulnerability in Jazz common products exists …3.7
• CVE-2017-14880In Qualcomm Android for MSM, Firefox OS for MSM, and QRD And…
• CVE-2017-14881While calling the IPA IOCTL handler for IPA_IOC_ADD_HDR_PROC…
• CVE-2017-14883In the function wma_unified_power_debug_stats_event_handler(…
• CVE-2017-14884In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-14885In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-14887In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-14888In all android releases(Android for MSM, Firefox OS for MSM,…
• CVE-2017-14889In Android for MSM, Firefox OS for MSM, QRD Android, with al…