CVE-2018-3579

—

CVSS 3.0

5.5 medium

EPSS

<1%p6

Published

Jun 12, 2018 (Jun 12, 2018)

Modified

Jun 17, 2026

Description

In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, event->num_entries_in_page is a value received from firmware that is not properly validated which can lead to a buffer over-read

Vendors: google
Products: android
Weakness: CWE-125
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.