CVE-2018-11261

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible Use-after-free issue in Media Codec process. Any application using codec service will be affected.

• CWE-416

• https://source.codeaurora.org/quic/la/platform/hardware/qcom/media/commit/?id=0e910e74e56f2a46f65dbc7694b160cd6e7f379aPatch, Third Party Advisory
• https://source.codeaurora.org/quic/la/platform/hardware/qcom/media/commit/?id=d41a7a4c7d43fa67f2e4a487b8a1fb0aac38226dPatch, Third Party Advisory
• https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletinPatch, Third Party Advisory
• https://source.codeaurora.org/quic/la/platform/hardware/qcom/media/commit/?id=0e910e74e56f2a46f65dbc7694b160cd6e7f379aPatch, Third Party Advisory
• https://source.codeaurora.org/quic/la/platform/hardware/qcom/media/commit/?id=d41a7a4c7d43fa67f2e4a487b8a1fb0aac38226dPatch, Third Party Advisory
• https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletinPatch, Third Party Advisory

Published

Nov 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11256An issue was discovered in PoDoFo 0.9.5. The function PdfDoc…
• CVE-2018-11257Permissions, Privileges, and Access Controls in TA in Snapdr…
• CVE-2018-11258In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and …
• CVE-2018-11259Due to Improper Access Control of NAND-based EFS in Snapdrag…
• CVE-2018-1126procps-ng before version 3.3.15 is vulnerable to an incorrec…4.8
• CVE-2018-11260In all android releases(Android for MSM, Firefox OS for MSM,…
• CVE-2018-11262In Android for MSM, Firefox OS for MSM, and QRD Android with…
• CVE-2018-11263In all Android releases (Android for MSM, Firefox OS for MSM…
• CVE-2018-11264Possible buffer overflow in Ontario fingerprint code due to …
• CVE-2018-11265In all android releases (Android for MSM, Firefox OS for MSM…
• CVE-2018-11266In all android releases(Android for MSM, Firefox OS for MSM,…
• CVE-2018-11267In Snapdragon (Automobile, Mobile, Wear) in version MDM9206,…