CVE-2018-11301

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%

exploitation probability

0.2%top 93% of all CVEs

observed exploitation

nono source reports it

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length while processing debug log event from firmware can lead to an integer overflow.

Affected products

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

References

https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=31ad3a5a7458e60f5e0ba4f492cebe1f1bda0964 https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin