Not rated
CVE-2018-11263 In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id…
Description
In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is received from the FW and is used to access the buffer to copy the radio stats received for each radio from FW. If the radio_id received from the FW is greater than or equal to maximum, an OOB write will occur. On supported Google Pixel and Nexus devices, this has been addressed in security patch level 2018-08-05.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Android for MSM, Firefox OS for MSM, QRD Android | Versions not published |
References
- www.codeaurora.org www.codeaurora.org
- source.codeaurora.org source.codeaurora.org
- source.android.com source.android.com
Timeline
- Published
- Last modified
Other CVEs of Android for MSM, Firefox OS for MSM, QRD Android
The 306 CVEs of Android for MSM, Firefox OS for MSM, QRD Android →
CVE-2018-12014
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null…
Not rated
CVE-2018-12011
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Uninitialized…
Not rated
CVE-2018-12006
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Users with no…
Not rated
CVE-2018-12010
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Absence of…
Not rated