CVE-2018-11263
Summary
| CVE | CVE-2018-11263 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-09-06 14:29:00 UTC |
| Updated | 2018-11-14 17:47:00 UTC |
| Description | In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is received from the FW and is used to access the buffer to copy the radio stats received for each radio from FW. If the radio_id received from the FW is greater than or equal to maximum, an OOB write will occur. On supported Google Pixel and Nexus devices, this has been addressed in security patch level 2018-08-05. |
Risk And Classification
Problem Types: CWE-129
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| platform/vendor/qcom-opensource/wlan/qcacld-3.0 - Unnamed repository | CONFIRM | source.codeaurora.org | Patch, Third Party Advisory |
| Pixel / Nexus Security Bulletin—August 2018 | CONFIRM | source.android.com | Vendor Advisory |
| August 2018 Code Aurora Security Bulletin - Code Aurora | CONFIRM | www.codeaurora.org | Patch, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.