CVE-2018-11266

2018-11-2718:00:00

qualcomm

www.cve.org

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%

JSON

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper input validation can lead to an improper access to already freed up dci client entries while closing dci client.

References

source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=21dd238ad58362877e341d905bea1c7cf273f19a

source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=8e5749b17c2024af317f06e08aae455af9b79bd0

www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletin