CVE-2018-11273
N/A
Published: September 18, 2018 at 06:00 PM UTC
Updated: June 17, 2026 at 01:35 AM UTC
1 product affected across 1 vendorAndroid
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%
Description
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, 'voice_svc_dev' is allocated as a device-managed resource. If error 'cdev_alloc_err' occurs, 'device_destroy' will free all associated resources, including 'voice_svc_dev' leading to a double free.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=789d4d21c3f1818dcbf74da4a051598e8f53676c
- https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=f34f6271362484c1f87f4176e72a3bfb80ee7711
- https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
References (4)
x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-componentsx_refsource_CONFIRMPatchThird Party Advisory
Source: [email protected]
https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=789d4d21c3f1818dcbf74da4a051598e8f53676cx_refsource_CONFIRMPatchThird Party Advisory
Source: [email protected]
https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=f34f6271362484c1f87f4176e72a3bfb80ee7711x_refsource_CONFIRMPatchThird Party Advisory
Source: [email protected]
https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletinQuick Info
StatusMODIFIED
CWE
CWE-415
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card