CVE-2018-11842
HIGHAndroid - Use-After-Free in WLAN Association Memory Handling
Title source: llmDescription
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, during wlan association, driver allocates memory. In case the mem allocation fails driver does a mem free though the memory was not allocated.
References (3)
Core 3
Core References
Patch, Third Party Advisory x_refsource_confirm
https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
Patch, Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2018-09-01#qualcomm-components
Patch, Third Party Advisory x_refsource_confirm
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=5eea70b9d5852e468467c1565927dbe0c76d8674
Scores
CVSS v3
7.8
EPSS
0.0020
EPSS Percentile
9.6%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (1)
google/android
Published
Sep 18, 2018
Tracked Since
Feb 18, 2026