CVE-2018-3564 in Android

Summary

In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a Use After Free condition can occur when mapping on the remote processor fails.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/19/2017
• Disclosure: 07/06/2018
• Moderation: VulDB entry created
• Entries: 1: VDB-120514
• CPE: ready
• CWE: CWE-416 (Confirmed)
• CVSS: 6.5
• EPSS: 0.00064
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-3564
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-3564
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-3564/