CVE-2011-3918
google android: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.
The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of service (reboot loop) via a crafted application.
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:android
References
- http://www.ai-lab.it/merlo/publications/DoSAndroid.pdf
- https://code.google.com/p/android-source-browsing/source/detail?repo=platform--system--core&r=e7fd911fd42b
- http://www.ai-lab.it/merlo/publications/DoSAndroid.pdf
- https://code.google.com/p/android-source-browsing/source/detail?repo=platform--system--core&r=e7fd911fd42b