VULNERABILITY INTELLIGENCE

CVE-2017-18281

CVSS score5.5 MEDIUM

EPSS probability0.17%

CISA KEVNot currently listed

Published2018-10-29

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel

Weakness classification

CWE-125: Out-of-bounds Read

Primary references

product-security@qualcomm.com — Third Party Advisory, VDB Entry
product-security@qualcomm.com — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory