description: In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound may result in an out of bounds memory access.
problem types: Integer Overflow to Buffer Overflow in Audio
affected:
{
product: All Qualcomm products
vendor: Qualcomm, Inc.
versions:
status: affected, version: Android for MSM, Firefox OS for MSM, QRD Android
}