kernel/omap/drivers/rpmsg/rpmsg_omx.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device file /dev/rpmsg-omx1 with the command 3221772291, and cause a kernel crash.
References
| Link | Resource |
|---|---|
| https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11020.md | Exploit Third Party Advisory |
| https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md | Exploit Third Party Advisory |
| https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11020.md | Exploit Third Party Advisory |
| https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 03:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11020.md - Exploit, Third Party Advisory | |
| References | () https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md - Exploit, Third Party Advisory |
Information
Published : 2018-10-16 22:29
Updated : 2024-11-21 03:42
NVD link : CVE-2018-11020
Mitre link : CVE-2018-11020
CVE.ORG link : CVE-2018-11020
JSON object : View
Products Affected
amazon
- fire_os
- kindle_fire_hd
CWE
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')