ID | CVE-2018-11273 | ||||||
Summary | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, 'voice_svc_dev' is allocated as a device-managed resource. If error 'cdev_alloc_err' occurs, 'device_destroy' will free all associated resources, including 'voice_svc_dev' leading to a double free. | ||||||
References |
|
||||||
Vulnerable Configurations |
|
||||||
CVSS |
|
||||||
CWE | CWE-415 | ||||||
CAPEC |
|
||||||
Access |
|
||||||
Impact |
|
||||||
cvss-vector via4 | AV:L/AC:L/Au:N/C:P/I:P/A:P | ||||||
refmap via4 | |||||||
Last major update | 09-11-2018 - 17:47 | ||||||
Published | 18-09-2018 - 18:29 | ||||||
Last modified | 09-11-2018 - 17:47 |