Google Android Camera Subsystem memory corruption

Summaryinfo

A vulnerability was found in Google Android. It has been declared as critical. This affects an unknown part of the component Camera Subsystem. Executing a manipulation can lead to memory corruption. This vulnerability appears as CVE-2018-11986. The attack requires local access. There is no available exploit. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability has been found in Google Android (Smartphone Operating System) (version now known) and classified as critical. This vulnerability affects some unknown processing of the component Camera Subsystem. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver.

The bug was discovered 12/03/2018. The weakness was presented 12/20/2018 (Website). The advisory is available at codeaurora.org. This vulnerability was named CVE-2018-11986 since 06/07/2018. The exploitation appears to be easy. Local access is required to approach this attack. No form of authentication is required for a successful exploitation. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 04/22/2020). It is expected to see the exploit prices for this product increasing in the near future.

The vulnerability was handled as a non-public zero-day exploit for at least 17 days. During that time the estimated underground price was around $25k-$100k.

Applying a patch is able to eliminate this problem.

See VDB-128141, VDB-128210, VDB-128211 and VDB-128212 for similar entries. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion