CVE-2018-11263

In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is received from the FW and is used to access the buffer to copy the radio stats received for each radio from FW. If the radio_id received from the FW is greater than or equal to maximum, an OOB write will occur. On supported Google Pixel and Nexus devices, this has been addressed in security patch level 2018-08-05.

• CWE-129

• https://source.android.com/security/bulletin/pixel/2018-08-01Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=476ad571ec5b42c42bb1ce9468f18c7e996646edPatch, Third Party Advisory
• https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletinPatch, Third Party Advisory
• https://source.android.com/security/bulletin/pixel/2018-08-01Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=476ad571ec5b42c42bb1ce9468f18c7e996646edPatch, Third Party Advisory
• https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletinPatch, Third Party Advisory

Published

Sep 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11258In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and …
• CVE-2018-11259Due to Improper Access Control of NAND-based EFS in Snapdrag…
• CVE-2018-1126procps-ng before version 3.3.15 is vulnerable to an incorrec…4.8
• CVE-2018-11260In all android releases(Android for MSM, Firefox OS for MSM,…
• CVE-2018-11261In all android releases(Android for MSM, Firefox OS for MSM,…
• CVE-2018-11262In Android for MSM, Firefox OS for MSM, and QRD Android with…
• CVE-2018-11264Possible buffer overflow in Ontario fingerprint code due to …
• CVE-2018-11265In all android releases (Android for MSM, Firefox OS for MSM…
• CVE-2018-11266In all android releases(Android for MSM, Firefox OS for MSM,…
• CVE-2018-11267In Snapdragon (Automobile, Mobile, Wear) in version MDM9206,…
• CVE-2018-11268In Snapdragon (Automobile, Mobile, Wear) in version MDM9206,…
• CVE-2018-11269In Snapdragon (Automobile, Mobile, Wear) in version MDM9206,…