CVE-2018-12014

—

CVSS 3.0

7.8 high

EPSS

<1%p8

Published

Feb 11, 2019 (Feb 11, 2019)

Modified

Jun 17, 2026

Description

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerability may occur due to missing NULL assignment in NAT module of freed pointer.

Vendors: google
Products: android
Weakness: CWE-416, CWE-476
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.