CVE-2018-11022

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3224132973 and cause a kernel crash.
References
Link Resource
https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:amazon:fire_os:4.5.5.3:*:*:*:*:*:*:*
cpe:2.3:h:amazon:kindle_fire_hd:3:*:*:*:*:*:*:*

Information

Published : 2018-10-16 15:29

Updated : 2018-12-03 07:10


NVD link : CVE-2018-11022

Mitre link : CVE-2018-11022


JSON object : View

CWE
CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Advertisement

dedicated server usa

Products Affected

amazon

  • kindle_fire_hd
  • fire_os