CVE-2018-11960

EPSS 0.2%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

20 dez 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel.

Produtos afetados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Referências

https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin http://www.securityfocus.com/bid/106136