CVE-2018-5891: Use After Free
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipcdataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in Snapdragon Mobile and Snapdragon Wear.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5891?
CVE-2018-5891 has a high severity rating due to the potential for exploitation via a Use After Free condition.
How do I fix CVE-2018-5891?
To address CVE-2018-5891, ensure that your affected Android device is updated to the latest firmware version provided by the manufacturer.
Which systems are affected by CVE-2018-5891?
CVE-2018-5891 affects various Qualcomm modem firmware versions used in multiple Android devices.
Can CVE-2018-5891 be exploited remotely?
Yes, CVE-2018-5891 can potentially be exploited remotely through the processing of IMS data in affected devices.
What are the repercussions of not patching CVE-2018-5891?
Failing to patch CVE-2018-5891 may lead to system instability, crashes, or unauthorized access to sensitive information.