CVE-2018-3564

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a Use After Free condition can occur when mapping on the remote processor fails.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jul 6, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-35657.8While sending a probe request indication in lim_send_sme_probe_req_ind() in all Android releases from CAF (Android for MSM, Firefox OS for MCVE-2018-35667.8In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security pCVE-2018-35677.8In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security pCVE-2018-35687.8In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security pCVE-2018-35697.8A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the linux kernel (AndroidCVE-2018-35707.8In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_foCVE-2018-35717.8In the KGSL driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a Use After FCVE-2018-35727.8While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all AndCVE-2018-35737.8In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while relocating kernel images wCVE-2018-35745.5In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, userspace can request ION cache CVE-2018-35767.8improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds access in all Android relCVE-2018-35777.5While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in Androi
CVE-2018-3564: High severity, CVSS 7.8 | Vulnix