CVE-2018-3566 in Android

Summary

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a buffer overwrite may occur in ProcSetReqInternal() due to missing length check.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 12/19/2017
• Disclosure: 04/03/2018
• Moderation: VulDB entry created
• Entries: 1: VDB-115646
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 6.5
• EPSS: 0.00061
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-3566
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-3566
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-3566/