CVE-2017-14885

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, wma_unified_link_peer_stats_event_handler function has a variable num_rates which represents the sum of all the peer_stats->num_rates. The current behavior in this function is to validate only the num_rates of the first peer stats (peer_stats->num_rates) against WMA_SVC_MSG_MAX_SIZE, but not the sum of all the peer's num_rates (num_rates) which may lead to a buffer overflow when the firmware buffer is copied in to the allocated buffer (peer_stats) as the size for the memory allocation - link_stats_results_size is based on num_rates.

• CWE-119

• http://www.securityfocus.com/bid/103254Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-03-01Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=44e992e169dbd601f95e845961cb2181b167a553Patch, Third Party Advisory
• http://www.securityfocus.com/bid/103254Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-03-01Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=44e992e169dbd601f95e845961cb2181b167a553Patch, Third Party Advisory

Published

Mar 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1488An undisclosed vulnerability in Jazz common products exists …3.7
• CVE-2017-14880In Qualcomm Android for MSM, Firefox OS for MSM, and QRD And…
• CVE-2017-14881While calling the IPA IOCTL handler for IPA_IOC_ADD_HDR_PROC…
• CVE-2017-14882In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-14883In the function wma_unified_power_debug_stats_event_handler(…
• CVE-2017-14884In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-14887In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-14888In all android releases(Android for MSM, Firefox OS for MSM,…
• CVE-2017-14889In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-1489IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-communi…
• CVE-2017-14890In Qualcomm Android for MSM, Firefox OS for MSM, and QRD And…
• CVE-2017-14891In the KGSL driver function _gpuobj_map_useraddr() in Androi…