CVE-2018-3594
published 2018-04-11CVE-2018-3594: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD…
critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing a private frame in an ID3 tag, a buffer over-read can occur when comparing frame data with predefined owner identifier strings.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — |
Android
CVE-2018-3594: Closed-source component
vendor_android·2018-04-01·CVSS 9.8
CVE-2018-3594 [CRITICAL] CVE-2018-3594: Closed-source component
Android Security Bulletin 2018-04-01
CVE: CVE-2018-3594
Severity: HIGH
Type: N/A
Component: Closed-source component
References: A-71501112*
GHSA
GHSA-wjrm-3qfx-g6wg: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650,
ghsa_unreviewed·2022-05-13
CVE-2018-3594 [CRITICAL] CWE-125 GHSA-wjrm-3qfx-g6wg: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650,
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing a private frame in an ID3 tag, a buffer over-read can occur when comparing frame data with predefined owner identifier strings.
No detection rules found.
No writeups or analysis indexed.
2018-04-11
Published