High severity7.8NVD Advisory· Published Nov 27, 2018· Updated Jun 17, 2026

CVE-2018-5856

Description

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, due to a race condition, a Use After Free condition can occur in Audio.

Affected products

Google/Android for MSMllm-create
Google/Firefox OS for MSMllm-create
Google/QRD Androidllm-create

Patches

Vulnerability mechanics

References

source.codeaurora.org/quic/la/kernel/msm-3.18/commit/nvdPatchThird Party Advisory
source.codeaurora.org/quic/la/platform/vendor/opensource/audio-kernel/commit/nvdPatchThird Party Advisory
www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletinnvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000