PT-2018-16057 · Mozilla+2 · Firefox Os+2

Publicado 2018-03-16 · Atualizado 2018-04-04 · CVE-2018-3560

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description A Double Free issue exists in the Audio Driver of the affected systems when opening a sound compression device. This issue is related to the Linux kernel used in all Android releases from CAF.

Recommendations For Android for MSM, update the Audio Driver to a version that fixes the Double Free issue. For Firefox OS for MSM, update the Audio Driver to a version that fixes the Double Free issue. For QRD Android, update the Audio Driver to a version that fixes the Double Free issue. As a temporary workaround, consider disabling the sound compression device until a patch is available.

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

CVE-2018-3560

Produtos afetados

Android

Firefox Os

Linux Kernel

Referências · 2

• https://source.android.com/security/bulletin/pixel/2018-03-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-3560 · Nota de Segurança