CVE-2018-18318

The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted 0xc0d8b300 ioctl call.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-10-15

Last modified

2024-09-16

Weaknesses

CWE-476

Affected products

• 360 Mobile Phone N6 Pro Firmware (Qiku)

References

• https://github.com/datadancer/HIAFuzz/blob/master/360%20Phone%20N6%20Pro%20Kernel%20Vuln.md