CVE-2018-5845 in Android

Summary

A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scenario in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 01/19/2018
• Disclosure: 06/06/2018
• Moderation: VulDB entry created
• Entries: VDB-119023 (1)
• CPE: ready
• CWE: CWE-416 (Confirmed)
• CVSS: 5.7
• EPSS: 0.00068
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-5845
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-5845
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-5845/