In all android releases (Android for... CVE-2018-11904

7.2 AV AC AU C I A
发布: 2018-09-19
修订: 2019-09-10

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, asynchronous callbacks received a pointer to a callers local variable. Should the caller return early (e.g., timeout), the callback will dereference an invalid pointer.