CVE-2018-11280

CVE-2018-11280 is a memory exhaustion vulnerability affecting Android for MSM, Firefox OS for MSM, and QRD Android releases from CAF using the Linux kernel. It arises from a lack of size validation for NAT entry input, allowing a malicious user-space process to cause memory exhaustion if the input exceeds the maximum allowed size. This is a medium severity vulnerability (CVSS 5.5) with a local attack vector and low attack complexity, potentially leading to high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.