PT-2018-16061 · Mozilla+3 · Firefox Os+3

Publicado 2018-07-06 · Atualizado 2018-08-28 · CVE-2018-3564

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05

Description A Use After Free condition can occur in the FastRPC driver when mapping on the remote processor fails.

Recommendations For Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, update to a version with a security patch level of 2018-06-05 or later to resolve the issue.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2018-3564

Produtos afetados

Android

Fastrpc

Firefox Os

Linux Kernel

Referências · 4

• https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components · Aviso do Fabricante
• https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=782cd411398e3cf2aca1615ab2649df0c46920ee · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2018-3564 · Nota de Segurança
• https://codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin · Correção