vulnwire
7.8high

CVE-2018-3582

Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Androi…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 5%
Public exploits
0
none known

Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Exploit prediction (EPSS)

0.16% probability of exploitation in the next 30 days, higher than 5% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.07.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android

Classification

Weakness
  • CWE-20 Improper Input Validation
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • codeaurora.org /security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2 · x_refsource_MISC, x_transferred
  • source.android.com /security/bulletin/pixel/2018-05-01 · Third Party Advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.