CVE-2018-11278

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault.

Score

CVSS 3.0 7.1 High

Status

Modified - product-security@qualcomm.com

Published

2018-09-18

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Android (Google)
• Android For Msm (Qualcomm Inc.)
• Firefox Os For Msm (Qualcomm Inc.)
• Qrd Android (Qualcomm Inc.)

References

• https://source.codeaurora.org/quic/la/platform/hardware/qcom/media/commit/?id=6c7dbdb2f067bf844beef2c41d9d67cacc3adfa6
• https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin