kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command 1118064517 and cause a kernel crash.
References
| Link | Resource |
|---|---|
| https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11021.md | Exploit Third Party Advisory |
| https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md | Exploit Third Party Advisory |
| https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11021.md | Exploit Third Party Advisory |
| https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 03:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11021.md - Exploit, Third Party Advisory | |
| References | () https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md - Exploit, Third Party Advisory |
Information
Published : 2018-10-16 22:29
Updated : 2024-11-21 03:42
NVD link : CVE-2018-11021
Mitre link : CVE-2018-11021
CVE.ORG link : CVE-2018-11021
JSON object : View
Products Affected
amazon
- fire_os
- kindle_fire_hd
CWE
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')