Medium severity6.5NVD Advisory· Published Nov 27, 2018· Updated Jun 17, 2026

CVE-2018-11946

Description

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication.

Affected products

Google/linux kernelllm-create
Google/Android
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

source.codeaurora.org/quic/qsdk/oss/system/feeds/routing/commit/nvdPatchThird Party Advisory
www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletinnvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000