In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, asynchronous callbacks received a pointer to a callers local variable. Should the caller return early (e.g., timeout), the callback will dereference an invalid pointer.
References
Configurations
Information
Published : 2018-09-19 07:29
Updated : 2019-04-18 05:58
NVD link : CVE-2018-11904
Mitre link : CVE-2018-11904
JSON object : View
CWE
CWE-476
NULL Pointer Dereference
Products Affected
- android