CVE-2018-11904
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, asynchronous callbacks received
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, asynchronous callbacks received a pointer to a callers local variable. Should the caller return early (e.g., timeout), the callback will dereference an invalid pointer.
Timeline
- CVE published
- Record last updated
Affected versions
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Version range not reported
References 25
source.codeaurora.org
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit?id=f11eeadd214e081a824f30aec5cb52d390ef576c
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit?id=191f02a7ec2a4cccaebbdac8d36897e1ae125244
- quic/la/platform/vendor/qcom-opensource/wlan/prima/commit?id=85ea1c126b05f133206cd9c6d8d9fbf137d81d27
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit?id=106f5c62b01b5a212bb53d13e3a3e70db2baedee
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit?id=ee9797fbefb45eee88c92420a24cda838cff6b45
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit?id=0c5a2ba407f23efd89cac6dc45e2ab9bdba3ada1
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit?id=174c053d1aa1bf5395647e3927d718255f3cbe75
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit?id=7af334bfc3375c9f85a330b84db17c0db1d6dade
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit?id=335ae3f8b353b6c7260eacb6aa706bb30f8a6bdc
- quic/la/platform/vendor/qcom-opensource/wlan/prima/commit?id=be70d02f12cb9a71a9b07b601f0efafc99718ec9
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit?id=54e7d8fa44202a8528ef33d85381bca63d7749a5
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit?id=57a5e1f62cd3230fd046b199eee902507100e18c
- quic/la/platform/vendor/qcom-opensource/wlan/prima/commit?id=8ee65e3c9addab1d3c15ba013401f5698fb73594
- quic/la/platform/vendor/qcom-opensource/wlan/prima/commit?id=00022c12e0cad8b735f94d6ee3785a557b4a3df2
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit?id=78a681f9d0d8e9843223dc42d02443e911b196a1
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit?id=0a755b400876ab4d58151e98462d3fa8fe099f61
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit?id=a6ace5b9ea34f22b136a35248087efc2ceb35fd4
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit?id=17275491f327909b32945ec1f465968021d22a7f
- quic/la/platform/vendor/qcom-opensource/wlan/prima/commit?id=a009a84d04bfac2a5c01101f38a70d216960fac0
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit?id=4abed07fd2380b6073f5cc9f2a701773e914f86f
- quic/la/platform/vendor/qcom-opensource/wlan/prima/commit?id=a4b4267f94802e0a4d93999649710bbf340796d5
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit?id=c13bdf105aa20559d2d783508051ad2dd3cfa65b
- quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit?id=99c0ddb04e8de0b8139778c7fb77b1957d113769
- quic/la/platform/vendor/qcom-opensource/wlan/prima/commit?id=3815e870ef906409af4a228f66d9400081227b75