VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 20, 2018· Updated Jun 17, 2026

CVE-2018-11985

CVE-2018-11985

Description

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, When allocating heap using user supplied size, Possible heap overflow vulnerability due to integer overflow in roundup to native pointer.

Affected products

4
  • Google/Android
    cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
  • Qualcomm, Inc./Android for MSM, Firefox OS for MSM, QRD Androidv5
    Range: All Android releases from CAF using the Linux kernel
  • Google/Android for MSMllm-create
  • Linux/Kernelllm-create

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.