CVEvulnerability
CVE-2018-12011
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-908
Description
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Uninitialized data for socket address leads to information exposure.
Affected configurations
• google android
Related
Weakness · CWE (1)
- CWE-908 Use of Uninitialized Resource weakness
References
- https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin Patch, Third Party Advisory
- https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin Patch, Third Party Advisory