CVE-2018-11894

EPSS 0.2%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 set 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing preferred network offload scan results integer overflow may lead to buffer overflow when large frame length is received from FW.

Produtos afetados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=e60c5608f843ec106a98a98b33de0c3be070d557 https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin http://www.securityfocus.com/bid/107770