Description
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, existing checks in place on partition size are incomplete and can lead to heap overwrite vulnerabilities while loading a secure application from the boot loader.
Scores
CVSS v3
7.8
EPSS
0.0002
EPSS Percentile
5.0%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-704
Status
published
Products (1)
google/android
Published
Nov 27, 2018
Tracked Since
Feb 18, 2026