CVE-2017-18281
A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel
- Score
- CVSS 3.0 5.5 Medium
- Status
- Modified - product-security@qualcomm.com
- Published
- 2018-10-29
- Last modified
- 2024-08-05
- Weaknesses
- CWE-125
Affected products
- Android (Google)
- Android For Msm (Qualcomm Inc.)
- Firefox Os For Msm (Qualcomm Inc.)
- Qrd Android (Qualcomm Inc.)
References
- http://www.securitytracker.com/id/1041432
- https://www.codeaurora.org/security-bulletin/2018/10/01/october-2018-code-aurora-security-bulletin
