CVE-2018-12011
MEDIUMAndroid - Information Exposure via Uninitialized Socket Address Data
Title source: llmDescription
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Uninitialized data for socket address leads to information exposure.
References (1)
Core 1
Core References
Patch, Third Party Advisory x_refsource_confirm
https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin
Scores
CVSS v3
5.5
EPSS
0.0014
EPSS Percentile
3.7%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-908
Status
published
Products (1)
google/android
Published
Feb 11, 2019
Tracked Since
Feb 18, 2026