ZeroHour

CVE-2018-11903

CVSS 3.0
7.8 high
EPSS
<1%p7
Published
()
Modified
Description

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from caller function used as an array index for WMA interfaces can lead to OOB write in WLAN HOST.

Vendors
google
Products
android
Weakness
CWE-129, CWE-787
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.