CVE-2018-11299 is a high-severity vulnerability affecting Android devices utilizing Qualcomm's Linux kernel, specifically impacting the WLAN host driver. The flaw stems from improper boundary checks when the WLAN firmware fails to correctly populate vdev IDs in statistics events, leading to invalid memory access. This can result in a kernel panic or page fault, causing system instability. With a CVSS score of 7.8, the vulnerability is locally exploitable with low attack complexity, potentially leading to high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.