In android for MSM Firefox OS for MSM QRD Android with all Android releases from CAF using the Linux kernel in a qbt1000 ioctl handler an incorrect buffer size check has an integer overflow vulnerability potentially leading to a buffer overflow.