VULNERABILITY INTELLIGENCE

CVE-2018-11262

CVSS score7.8 HIGH

EPSS probability0.20%

CISA KEVNot currently listed

Published2018-09-04

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the 'TotalPart' could cross 'GptHeader->MaxPtCnt' and which could result in OOB write in patching GPT.

Weakness classification

CWE-682: Incorrect Calculation
CWE-787: Out-of-bounds Write

Primary references

product-security@qualcomm.com — Third Party Advisory, VDB Entry
product-security@qualcomm.com — Patch, Third Party Advisory
product-security@qualcomm.com — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory