CVE-2018-5864

MEDIUM

Android <2018-07-05 - Buffer Overflow/Info Disclosure

Title source: llm

Description

While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read and information leak can potentially occur.

References (3)

Core 3

Core References

Patch x_refsource_confirm

https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin

Patch, Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/pixel/2018-07-01

Patch x_refsource_confirm

https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=9c042f7827e0d21e5b93c04b418bca0230de91dc

Scores

CVSS v3 5.5

EPSS 0.0007

EPSS Percentile 20.9%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-125

Status published

Products (1)

google/android

Published Jul 06, 2018

Tracked Since Feb 18, 2026