CVE-2018-5906

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible buffer overflow in debugfs module due to lack of check in size of input before copying into buffer.

Score

CVSS 3.0 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2018-11-27

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Android (Google)

References

• https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=ac40b7c7591476a8863b477ddc1c14c631f77256
• https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletin