CVE-2018-5841
Last modified
CVE-2018-5841 is a vulnerability of currently unknown severity. dcc_curr_list is initialized with a default invalid value that is expected to be programmed by the user through a sysfs node which could lead to an invalid access in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
dcc_curr_list is initialized with a default invalid value that is expected to be programmed by the user through a sysfs node which could lead to an invalid access in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | All versions |
References
- https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2Patch, Third Party Advisory
- https://source.android.com/security/bulletin/2018-05-01Patch, Vendor Advisory
- https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-5841?
How severe is CVE-2018-5841?
How do I fix CVE-2018-5841?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-5835If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer ove…
- CVE-2018-5836In wma_nan_rsp_event_handler() in Android releases from CAF …
- CVE-2018-5837In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074,…
- CVE-2018-5838Improper Validation of Array Index In the adreno OpenGL driv…
- CVE-2018-5839Improperly configured memory protection allows read/write ac…
- CVE-2018-5840Buffer Copy without Checking Size of Input can occur during …
- CVE-2018-5842An arbitrary address write can occur if a compromised WLAN f…
- CVE-2018-5843In the function wma_pdev_div_info_evt_handler() in all Andro…
- CVE-2018-5844In the video driver function set_output_buffers(), binfo can…
- CVE-2018-5845A race condition in drm_atomic_nonblocking_commit() in the d…
- CVE-2018-5846A Use After Free condition can occur in the IPA driver whene…
- CVE-2018-5847Early or late retirement of rotation requests can result in …
Are you affected by CVE-2018-5841?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
