CVE-2018-5887

—

CVSS 3.0

7.8 high

EPSS

<1%p7

Published

Jul 6, 2018 (Jul 6, 2018)

Modified

Jun 17, 2026

Description

While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Vendors: google
Products: android
Weakness: CWE-125
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.