1. Home
  2. CVE Database
  3. CVE-2018-11021
HIGH · 7.5

CVE-2018-11021

kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on dev...

Vulnerability Description

kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command 1118064517 and cause a kernel crash.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
AmazonFire Os4.5.5.3
AmazonKindle Fire Hd3

Related Weaknesses (CWE)

CWE-88

References

FAQ

What is CVE-2018-11021?

CVE-2018-11021 is a vulnerability with a CVSS score of 7.5 (HIGH). kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on dev...

How severe is CVE-2018-11021?

CVE-2018-11021 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-11021?

Check the references section above for vendor advisories and patch information. Affected products include: Amazon Fire Os, Amazon Kindle Fire Hd.