description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when updating custom EDID (hdmi_tx_sysfs_wta_edid), if edid_size, which is controlled by userspace, is too large, a buffer overflow occurs.
problem types: Buffer Copy without Checking Size of Input in Display
affected:
{
product: Android for MSM, Firefox OS for MSM, QRD Android
vendor: Qualcomm, Inc.
versions:
status: affected, version: All Android releases from CAF using the Linux kernel
}