kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command 1118064517 and cause a kernel crash.
References
Link | Resource |
---|---|
https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md | Exploit Third Party Advisory |
https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11021.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2018-10-16 15:29
Updated : 2018-12-03 10:21
NVD link : CVE-2018-11021
Mitre link : CVE-2018-11021
JSON object : View
CWE
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Products Affected
amazon
- kindle_fire_hd
- fire_os