In Android for MSM Firefox OS for MSM QRD Android with all Android releases from CAF using the Linux kernel while processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_NDP cfg80211 vendor command a buffer over-read can occur.