description: In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to calculate offsets and sizes for copy operations, which could result in heap overflow.
problem types: Buffer Copy without Checking Size of Input in Display
affected:
{
product: All Qualcomm products
vendor: Qualcomm, Inc.
versions:
status: affected, version: Android for MSM, Firefox OS for MSM, QRD Android
}