High severity7.1NVD Advisory· Published Sep 18, 2018· Updated Jun 17, 2026
CVE-2018-11278
CVE-2018-11278
Description
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault.
Affected products
1- Qualcomm, Inc./Android for MSM, Firefox OS for MSM, QRD Androidv5Range: All Android releases from CAF using the Linux kernel
Patches
Vulnerability mechanics
References
2- source.codeaurora.org/quic/la/platform/hardware/qcom/media/commit/nvdPatchThird Party Advisory
- www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletinnvdPatchThird Party Advisory
News mentions
0No linked articles in our index yet.