← back
CVE-2018-11262

CVE-2018-11262

EPSS 0.2%
In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the 'TotalPart' could cross 'GptHeader->MaxPtCnt' and which could result in OOB write in patching GPT.
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=29ab5eb75bc9ed01466ab1a98e932e59fe27ad42https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletinhttp://www.securityfocus.com/bid/106949