CVE-2011-3918: Google Android

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of service (reboot loop) via a crafted application.

Affected products

• Google Android: up to and including 4.0.3; version 1.0 only; version 1.1 only; version 1.5 only; version 1.6 only; version 2.0 only; …

Published 2012-10-07. Last modified 2026-06-16.