7.8

CVE-2018-11816

Use After Free in Video

Crafted Binder Request Causes Heap UAF in MediaServer
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ 9206 Lte Modem Firmware Version -
   Qualcomm ≫ 9206 Lte Modem Version -
Qualcomm ≫ Apq8016 Firmware Version -
   Qualcomm ≫ Apq8016 Version -
Qualcomm ≫ Apq8017 Firmware Version -
   Qualcomm ≫ Apq8017 Version -
Qualcomm ≫ Apq8039 Firmware Version -
   Qualcomm ≫ Apq8039 Version -
Qualcomm ≫ Apq8052 Firmware Version -
   Qualcomm ≫ Apq8052 Version -
Qualcomm ≫ Apq8056 Firmware Version -
   Qualcomm ≫ Apq8056 Version -
Qualcomm ≫ Apq8076 Firmware Version -
   Qualcomm ≫ Apq8076 Version -
Qualcomm ≫ Aqt1000 Firmware Version -
   Qualcomm ≫ Aqt1000 Version -
Qualcomm ≫ Ar6003 Firmware Version -
   Qualcomm ≫ Ar6003 Version -
Qualcomm ≫ Sd660 Firmware Version -
   Qualcomm ≫ Sd660 Version -
Qualcomm ≫ Sd670 Firmware Version -
   Qualcomm ≫ Sd670 Version -
Qualcomm ≫ Sd820 Firmware Version -
   Qualcomm ≫ Sd820 Version -
Qualcomm ≫ Sd821 Firmware Version -
   Qualcomm ≫ Sd821 Version -
Qualcomm ≫ Sd835 Firmware Version -
   Qualcomm ≫ Sd835 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.016
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Qualcomm 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
Vendor Advisory