In all android releases (Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel while processing vendor scan request when input argument - length of request IEs is greater than maximum can lead to a buffer overflow.