CVE-2018-3578
CVE-2018-3578
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Jun 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading to a heap buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD AndroidWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →