CVE Database
/

CVE-2018-11278

Back to search

CVE-2018-11278

Published: Sep 18, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault.

VendorProductVersions

Qualcomm, Inc.

Android for MSM, Firefox OS for MSM, QRD Android

affected
All Android releases from CAF using the Linux kernel

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now