CVE-2017-18159

—

CVSS 3.0

7.8 high

EPSS

<1%p15

Published

Jul 6, 2018 (Jul 6, 2018)

Modified

Jun 17, 2026

Description

In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while processing a StrHwPlatform with length smaller than EFICHIPINFO_MAX_ID_LENGTH, an array out of bounds access may occur.

Vendors: google
Products: android
Weakness: CWE-125
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.