CVE-2018-5855 While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buff...
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read can potentially occur.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | All versions | No fix listed |
| qualcomm Android for MSM, Firefox OS for MSM, QRD Android | = All Android releases from CAF using the Linux kernel | No fix listed |
References
- 107770 vdb-entry
- source.android.com vendor-advisory
- source.codeaurora.org patch third-party-advisory
- www.codeaurora.org patch third-party-advisory