VULNERABILITY INTELLIGENCE

CVE-2018-11280

CVSS score5.5 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2018-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing user-space there is no size validation of the NAT entry input. If the user input size of the NAT entry is greater than the max allowed size, memory exhaustion will occur.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references