Skip to content
OpenAdvisories
Unscored CVE-2018-11280 EUVD-2018-3320GHSA-67h5-5fjm-vp6q

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing user-space the…

Published Sep 18, 2018 · Updated Aug 5, 2024 · Assigned by qualcomm

Description

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing user-space there is no size validation of the NAT entry input. If the user input size of the NAT entry is greater than the max allowed size, memory exhaustion will occur.

Affected products

VendorProductAffectedFixed
Qualcomm Android for MSM, Firefox OS for MSM, QRD Android All Android releases from CAF using the Linux kernel —

References