CVE-2018-11963

EPSS 0.2%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

20 dez 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Buffer overread may occur due to non-null terminated strings while processing vsprintf in camera jpeg driver.

Produtos afetados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Referências

https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin http://www.securityfocus.com/bid/106136