{"id":"CVE-2018-11869","aliases":["EUVD-2018-3861","GHSA-cxgf-6hpp-7hjr"],"status":"published","title":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...","description":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in WMA handler.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00218,"percentile":0.12343,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2018-09-18T18:00:00Z","modified":"2026-06-17T01:36:44Z","products":[{"vendor":"google","product":"android"},{"vendor":"qualcomm, inc.","product":"android for msm, firefox os for msm, qrd android"}],"references":[{"url":"https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=e359db47f1e334886eaaf1d71a4754dd312be01c","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/107770","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11869"},{"url":"https://github.com/advisories/GHSA-cxgf-6hpp-7hjr"}],"sources":{"cve":[{"id":"CVE-2018-11869","description":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in WMA handler.","status":"published","published":"2018-09-18T18:00:00Z","modified":"2024-08-05T08:24:02.197Z","updated_at":"2026-11-02T14:35:09.570381Z"}],"euvd":[{"id":"EUVD-2018-3861","description":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in WMA handler.","status":"published","published":"2018-09-18T18:00:00Z","modified":"2024-08-05T08:24:02Z","updated_at":"2026-11-03T02:39:54.130594Z"}],"ghsa":[{"id":"GHSA-cxgf-6hpp-7hjr","title":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...","description":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in WMA handler.","status":"published","published":"2022-05-14T01:09:24Z","modified":"2023-02-02T05:03:10Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:51:35.055103Z"}],"nvd":[{"id":"CVE-2018-11869","description":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in WMA handler.","status":"published","published":"2018-09-18T18:29:08.147Z","modified":"2026-06-17T01:36:44.503Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:40.661264Z"}]}}