CVE-2018-11262

—

CVSS 3.0

7.8 high

EPSS

<1%p10

Published

Sep 4, 2018 (Sep 4, 2018)

Modified

Jun 17, 2026

Description

In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the 'TotalPart' could cross 'GptHeader->MaxPtCnt' and which could result in OOB write in patching GPT.

Vendors: google
Products: android
Weakness: CWE-682, CWE-787
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.