CVE-2017-18281

EPSS 0.2%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 oct 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel

Productos afectados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Referencias

https://www.codeaurora.org/security-bulletin/2018/10/01/october-2018-code-aurora-security-bulletin http://www.securitytracker.com/id/1041432