← back
CVE-2018-11898

CVE-2018-11898

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
exploitation probability
0.2%top 92% of all CVEs
observed exploitation
nono source reports it
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing start bss request from upper layer, out of bounds read occurs if ssid length is greater than maximum.
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android
References
https://source.android.com/security/bulletin/2018-09-01#qualcomm-componentshttps://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=dc657f502adb3038784b7488d2f183ed31b6aac3https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin