CVE-2018-5886
A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed.
- Score
- CVSS 3.0 7.5 High
- Status
- Modified - product-security@qualcomm.com
- Published
- 2018-07-06
- Last modified
- 2024-09-17
- Weaknesses
- CWE-125
Affected products
- Android (Google)
- Android For Msm (Qualcomm Inc.)
- Firefox Os For Msm (Qualcomm Inc.)
- Qrd Android (Qualcomm Inc.)
References
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=97017d59158086689488bdcfcafb59654a6f10da
- https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
