VULNERABILITY INTELLIGENCE

CVE-2017-18051

CVSS score7.5 HIGH

EPSS probability0.52%

CISA KEVNot currently listed

Published2018-03-16

Last modified2026-06-17

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for event->vdev_id in wma_rcpi_event_handler(), which is received from firmware, leads to potential out of bounds memory read.