CVE-2018-3586

2018-07-0619:00:00

qualcomm

www.cve.org

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

46.3%

JSON

An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.

CNA Affected

[
  {
    "product": "Android for MSM, Firefox OS for MSM, QRD Android",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "All Android releases from CAF using the Linux kernel"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2018-07-01#qualcomm-components