CVEvulnerability
CVE-2018-11301
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-09-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-191
Description
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length while processing debug log event from firmware can lead to an integer overflow.
Affected configurations
• google android
Related
Weakness · CWE (1)
- CWE-191 Integer Underflow (Wrap or Wraparound) weakness
References
- https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components Patch, Vendor Advisory
- https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=31ad3a5a7458e60f5e0ba4f492cebe1f1bda0964 Patch, Third Party Advisory
- https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin Patch, Third Party Advisory
- https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components Patch, Vendor Advisory
- https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=31ad3a5a7458e60f5e0ba4f492cebe1f1bda0964 Patch, Third Party Advisory
- https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin Patch, Third Party Advisory