Aleksander Morgado e9932bde9d libqcdm: fix heap out-of-bounds read in qcdm_cmd_pilot_sets_result ...

Validate the active, candidate, and neighbor count fields in
qcdm_cmd_pilot_sets_result() before parsing the sets.

Ensure that the sum of counts does not exceed the size of the static
sets array in the response structure, and that the calculated size
based on the counts fits within the received buffer len.

https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/work_items/1069

Signed-off-by: Aleksander Morgado <aleksandermj@google.com>

2026-07-13 10:59:28 +02:00

..

src

libqcdm: fix heap out-of-bounds read in qcdm_cmd_pilot_sets_result

2026-07-13 10:59:28 +02:00

tests

build: drop autotools

2022-11-07 14:26:02 +00:00