CVE-2017-18281

—

CVSS 3.0

5.5 medium

EPSS

<1%p7

Published

Oct 29, 2018 (Oct 29, 2018)

Modified

Jun 17, 2026

Description

A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel

Vendors: google
Products: android
Weakness: CWE-125
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.