CVE-2018-5831

EPSS 0.2%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

06 jul 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a reference counting error can lead to a Use After Free condition.

Productos afectados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Referencias

https://source.android.com/security/bulletin/2018-06-01#qualcomm-components https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e3e13d745238ad8853af47c2d938344ea8d3c77f https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin