cve.bz

CVE-2017-18067

9.8 criticalEPSS 2.9%

Critical (9.8) in google android. EPSS 2.9% chance of exploitation in the next 30 days.

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation while processing an encrypted authentication management frame in lim_send_auth_mgmt_frame() leads to buffer overflow.

Severity

CVSS 3.0

9.8 critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWEs
CWE-20, CWE-119
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON