CVE-2018-3576

EPSS 0.02%
Veröffentlicht 12.06.2018 20:29:00
Zuletzt bearbeitet 21.11.2024 04:05:41
Quelle product-security@qualcomm.com
CVE-Watchlists
Login
Unerledigt
Login

improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds access in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.02%	0.025

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://source.android.com/security/bulletin/pixel/2018-05-01

Third Party Advisory

https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2

Patch

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-3576

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-3576

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-3576

EUVD