CVE-2018-5861

HIGH

Android - Heap Overflow via Incomplete Partition Size Checks

Title source: llm
STIX 2.1

Description

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, existing checks in place on partition size are incomplete and can lead to heap overwrite vulnerabilities while loading a secure application from the boot loader.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0017
EPSS Percentile 6.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-704
Status published
Products (1)
google/android
Published Nov 27, 2018
Tracked Since Feb 18, 2026