CVE-2018-11275

EPSS 0.04%
Veröffentlicht 18.09.2018 18:29:01
Zuletzt bearbeitet 21.11.2024 03:43:02
Quelle product-security@qualcomm.com
CVE-Watchlists
Login
Unerledigt
Login

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when flashing image using FastbootLib if size is not divisible by block size, information leak occurs.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.113

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:C/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.securityfocus.com/bid/106949

Third Party Advisory

VDB Entry

https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin

Patch

Third Party Advisory

https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=bf0261ab128f28763258c620bc95ca379a286b59

Patch

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-11275

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-11275

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-11275

EUVD