High severity7.8NVD Advisory· Published Sep 19, 2018· Updated Jun 17, 2026

CVE-2018-11904

Description

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, asynchronous callbacks received a pointer to a callers local variable. Should the caller return early (e.g., timeout), the callback will dereference an invalid pointer.

Affected products

Qualcomm, Inc./Android for MSM, Firefox OS for MSM, QRD Androidv5
Range: All Android releases from CAF using the Linux kernel

Patches

Vulnerability mechanics

References

source.codeaurora.org/quic/la//platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/nvdPatchThird Party Advisory
www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletinnvdPatchThird Party Advisory
www.securityfocus.com/bid/107770nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000