High severity7.8NVD Advisory· Published Nov 27, 2018· Updated Jun 17, 2026

CVE-2018-11919

Description

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a potential heap overflow and memory corruption due to improper error handling in SOC infrastructure.

Affected products

Google/Android SDKinferred

Patches

Vulnerability mechanics

References

source.codeaurora.org/quic/la/kernel/msm-4.4/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/kernel/msm-4.9/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/qsdk/oss/kernel/linux-msm/commit/nvdPatchThird Party Advisory
www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletinnvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000