CVE-2018-5841

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

dcc_curr_list is initialized with a default invalid value that is expected to be programmed by the user through a sysfs node which could lead to an invalid access in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1188

Affected software

No affected versions have been published.

Timeline

Published
Jun 6, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-58427.8An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android releases from CAF (AnCVE-2018-58437.8In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using thCVE-2018-58447.8In the video driver function set_output_buffers(), binfo can be accessed after being freed in a failure scenario in all Android releases froCVE-2018-58457.0A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scenario in all Android rCVE-2018-58467.8A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTCVE-2018-58477.8Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF (Android for MSM, FiCVE-2018-58487.8In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of tCVE-2018-58497.0Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the CVE-2018-58507.8In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a bufferCVE-2018-58517.8Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releCVE-2018-58527.8An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat CVE-2018-58537.0A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Androi