PT-2018-16057 · Mozilla+2 · Firefox Os+2

Published

2018-03-16

·

Updated

2018-04-04

·

CVE-2018-3560

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)
Description A Double Free issue exists in the Audio Driver of the affected systems when opening a sound compression device. This issue is related to the Linux kernel used in all Android releases from CAF.
Recommendations For Android for MSM, update the Audio Driver to a version that fixes the Double Free issue. For Firefox OS for MSM, update the Audio Driver to a version that fixes the Double Free issue. For QRD Android, update the Audio Driver to a version that fixes the Double Free issue. As a temporary workaround, consider disabling the sound compression device until a patch is available.

Fix

Double Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2018-3560

Affected Products

Android
Firefox Os
Linux Kernel