Vulnerability in Google Android

CVE-2011-3918

The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of service (reboot loop) via a crafted application.

EPSS: 0.014 (68.7th percentile) — read the EPSS interpretation.

Affected products

Google Android — versions 1.0, 1.1, 1.5
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

chrome-cve-admin@google.com (x_refsource_MISC)
chrome-cve-admin@google.com (x_refsource_CONFIRM)