CVE-2018-11263

CVE-2018-11263: vulnerability in Qualcomm, Inc. Android for MSM, Firefox OS for…

Published · Updated

Follow this CVE+ Monitor Android for MSM, Firefox OS for MSM, QRD Android

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is received from the FW and is used to access the buffer to copy the radio stats received for each radio from FW. If the radio_id received from the FW is greater than or equal to maximum, an OOB write will occur. On supported Google Pixel and Nexus devices, this has been addressed in security patch level 2018-08-05.
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android
Related CVEs — Qualcomm, Inc. Android for MSM, Firefox OS for…

In the same product, most dangerous first.

CVE-2018-5855—CVE-2018-5855EPSS 1.1%CVE-2017-11089—CVE-2017-11089EPSS 1.0%CVE-2018-11905—CVE-2018-11905EPSS 0.9%CVE-2018-5829—CVE-2018-5829EPSS 0.9%CVE-2017-15817—CVE-2017-15817EPSS 0.9%CVE-2018-3577—CVE-2018-3577EPSS 0.8%