High severity7.8NVD Advisory· Published Nov 27, 2018· Updated Jun 17, 2026

CVE-2018-11906

Description

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a security concern with default privileged access to ADB and debug-fs.

Affected products

Google/Android
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Google/Android for MSMllm-create
Code Aurora Forum (CAF)/Androidllm-fuzzy
Code Aurora Forum (CAF)/Linux Kernelllm-fuzzy

Patches

Vulnerability mechanics

References

source.codeaurora.org/quic/le/meta-qti-bsp/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/le/qti-conf/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/le/qti-conf/commit/nvdPatchThird Party Advisory
www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletinnvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000