CVE-2018-5896

7.1 highEPSS 0.2%

High (7.1) in google android. EPSS 0.2% chance of exploitation in the next 30 days.

In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking source buffer length against length of packet stream to be copied.

Severity

CVSS 3.0

7.1 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2018-07-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

https://source.android.com/security/bulletin/2018-06-01#qualcomm-components
https://source.android.com/security/bulletin/2018-06-01#qualcomm-components

Check your stack JSON