CVE-2018-5856

Опубликовано: 27 нояб. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 6.1

EPSS Низкий

Описание

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, due to a race condition, a Use After Free condition can occur in Audio.

Ссылки

https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=3b666735fcc49f5cd3a63440fdc0667ae9316f17
Patch
Third Party Advisory
https://source.codeaurora.org/quic/la/platform/vendor/opensource/audio-kernel/commit/?id=7ab92dd2952d59f3c15c856effe94bba1858e3ff
Patch
Third Party Advisory
https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
Patch
Third Party Advisory
https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=3b666735fcc49f5cd3a63440fdc0667ae9316f17
Patch
Third Party Advisory
https://source.codeaurora.org/quic/la/platform/vendor/opensource/audio-kernel/commit/?id=7ab92dd2952d59f3c15c856effe94bba1858e3ff
Patch
Third Party Advisory
https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00058

Низкий

7.8 High

CVSS3

6.1 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2018-5856

CVSS3: 5.5

redhat

около 7 лет назад

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, due to a race condition, a Use After Free condition can occur in Audio.

GHSA-gx6v-c88r-g4w4

CVSS3: 7.8

github

больше 3 лет назад

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, due to a race condition, a Use After Free condition can occur in Audio.

EPSS

Процентиль: 18%

0.00058

Низкий

7.8 High

CVSS3

6.1 Medium

CVSS2

Дефекты

CWE-416