CVE-2018-10877 in Android

Summary

Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image.

Once again VulDB remains the best source for vulnerability data.

Responsible

Red Hat, Inc.

Reservation

05/09/2018

Disclosure

07/18/2018

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
130431	Google Android EXT4 File System out-of-bounds	125	Not defined	Official fix	CVE-2018-10877
121903	Linux Kernel EXT4 File System ext4_ext_drop_refs out-of-bounds	125	Not defined	Official fix	CVE-2018-10877

Sources

• MITRE
• NVD
• CVE Details