{"id":"CVE-2018-11986","aliases":["EUVD-2018-3978","GHSA-jmq8-q284-83mw"],"status":"published","title":"In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...","description":"In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00142,"percentile":0.03536,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2018-12-20T15:00:00Z","modified":"2026-06-17T01:36:57Z","products":[{"vendor":"google","product":"android"},{"vendor":"qualcomm, inc.","product":"android for msm, firefox os for msm, qrd android"}],"references":[{"url":"https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11986"},{"url":"https://github.com/advisories/GHSA-jmq8-q284-83mw"}],"sources":{"cve":[{"id":"CVE-2018-11986","description":"In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver.","status":"published","published":"2018-12-20T15:00:00Z","modified":"2024-08-05T08:24:03.573Z","updated_at":"2026-11-02T14:35:09.908186Z"}],"euvd":[{"id":"EUVD-2018-3978","description":"In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver.","status":"published","published":"2018-12-20T15:00:00Z","modified":"2024-08-05T08:24:03Z","updated_at":"2026-11-03T02:39:53.575925Z"}],"ghsa":[{"id":"GHSA-jmq8-q284-83mw","title":"In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...","description":"In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver.","status":"published","published":"2022-05-14T01:42:07Z","modified":"2023-02-02T05:04:32Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:51:53.84386Z"}],"nvd":[{"id":"CVE-2018-11986","description":"In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver.","status":"published","published":"2018-12-20T15:29:03.017Z","modified":"2026-06-17T01:36:57.42Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:50.99633Z"}]}}