CVE-2018-12010

EPSS 0.1%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 fev 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Absence of length sanity check may lead to possible stack overflow resulting in memory corruption in trustzone region.

Produtos afetados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Referências

https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin