In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check can lead to out-of-bounds access in WLAN function.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon