In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing global variable "debug_client" in multi-thread manner, Use after free issue occurs
References
Link | Resource |
---|---|
https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin | Patch Third Party Advisory |
https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=59ba3de38f8ffc5484898703d20b33980d29a41c | Patch Third Party Advisory |
Configurations
Information
Published : 2018-09-18 11:29
Updated : 2018-11-09 09:43
NVD link : CVE-2018-11286
Mitre link : CVE-2018-11286
JSON object : View
CWE
CWE-416
Use After Free
Products Affected
- android