CVE-2015-0570 in Google Android

Summary

Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that uses a long WPS IE element.

Reservation

01/07/2015

Disclosure

05/09/2016

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
83095	Google Android Qualcomm Wi-Fi Driver access control	264	Not defined	Official fix	CVE-2015-0570
80660	Linux Kernel SET_WPS_IE IOCTL access control	264	Unproven	Unavailable	CVE-2015-0570