In Android for MSM Firefox OS for MSM QRD Android with all Android releases from CAF using the Linux kernel while processing cfg80211 vendor sub command QCA_NL80211_VENDOR_SUBCMD_ROAM a buffer over-read can occur.