6.5med
CVE-2018-9354
In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0.
Published 23 mo ago · modified 4 mo ago · JSON
CVSS
6.5
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 26%
Public exploits
0
none known
Summary
In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
CISA SSVC assessment
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 23 mo ago
Exploit prediction (EPSS)
0.33% probability of exploitation in the next 30 days, higher than 26% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Affected products
- Google Android
Classification
- Weakness
- CWE-369 Divide By Zero
References
- source.android.com /docs/security/bulletin/pixel/2018-06-01
Sources
- CVE List: CVE-2018-9354
- NVD: CVE-2018-9354
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.