CVE-2017-18158

EPSS 0.2%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

06 jul 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05 while flashing images.

Productos afectados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Referencias

https://source.android.com/security/bulletin/2018-06-01#qualcomm-components https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=316136f292cedaecf17823d6f3b63cf2d11314b3