ID CVE-2018-5860
Summary In the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, a data structure may be used without being initialized correctly.
References
Vulnerable Configurations
  • cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
    cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
CVSS
Base: 4.9 (as of 06-08-2018 - 14:45)
Impact:
Exploitability:
CWE CWE-824
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:N/A:C
refmap via4
misc https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin
Last major update 06-08-2018 - 14:45
Published 15-06-2018 - 20:29
Last modified 06-08-2018 - 14:45
Back to Top