CVE-2018-11986
CVE-2018-11986
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 Dec 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver.
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android