CVEvulnerability
CVE-2017-18281
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-10-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-125
Description
A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel
Affected configurations
• google android
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- http://www.securitytracker.com/id/1041432 Third Party Advisory, VDB Entry
- https://www.codeaurora.org/security-bulletin/2018/10/01/october-2018-code-aurora-security-bulletin Patch, Third Party Advisory
- http://www.securitytracker.com/id/1041432 Third Party Advisory, VDB Entry
- https://www.codeaurora.org/security-bulletin/2018/10/01/october-2018-code-aurora-security-bulletin Patch, Third Party Advisory