CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.7. It affects Linux, Android, Firefox.
CVE
CVE-2018-11293
Severity
MEDIUM
CVSS
5.7
EPSS
0.39%
Linux Android Firefox
Original NVD Description
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler, ndp_cfg len and num_ndp_app_info is from fw. If they are not checked, it may cause buffer over-read once the value is too large.
Related CVEs
Other vulnerabilities affecting the same vendor(s)