CVE-2018-3598 Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android
Insufficient parameter validation in the Qualcomm camera driver allows attackers to leak sensitive information and access out-of-bounds memory.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-3598?
CVE-2018-3598 is a high-severity vulnerability in Google Android, published on 3 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, insufficient validation of parameters from userspace in the camera driver can lead to information leak and out-of-bounds access.
Weakness: CWE-200
Which versions are affected by CVE-2018-3598?
It affects 1 product.
Products include Google Android.
How do I fix CVE-2018-3598?
No fix has been published for CVE-2018-3598 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-3598 being exploited?
There is no known exploitation of CVE-2018-3598 in the wild and no public exploit code.
Other vulnerabilities in Google Android
Sources
Also known as GHSA-p7xv-8qc8-f875.