CVEvulnerability

CVE-2018-11278

7.1 HIGH Published 2018-09-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.1 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 2.0 ([email protected])
6.6 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:C
Weaknesses
CWE-125

Description

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault.

Affected configurations

• google android

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References