{"id":"CVE-2017-18281","aliases":["EUVD-2017-9408","GHSA-frr9-xqj8-qrw9"],"status":"published","title":"A bool variable in Video function, which gets typecasted to int before being read could result in...","description":"A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00173,"percentile":0.06796,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2018-10-29T18:00:00Z","modified":"2026-06-17T01:12:32Z","products":[{"vendor":"google","product":"android"},{"vendor":"qualcomm, inc.","product":"android for msm, firefox os for msm, qrd android"}],"references":[{"url":"http://www.securitytracker.com/id/1041432","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.codeaurora.org/security-bulletin/2018/10/01/october-2018-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18281"},{"url":"https://github.com/advisories/GHSA-frr9-xqj8-qrw9"}],"sources":{"cve":[{"id":"CVE-2017-18281","description":"A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel","status":"published","published":"2018-10-29T18:00:00Z","modified":"2024-08-05T21:20:49.695Z","updated_at":"2026-11-02T14:33:22.064284Z"}],"euvd":[{"id":"EUVD-2017-9408","description":"A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel","status":"published","published":"2018-10-29T18:00:00Z","modified":"2024-08-05T21:20:49Z","updated_at":"2026-11-03T02:23:07.063551Z"}],"ghsa":[{"id":"GHSA-frr9-xqj8-qrw9","title":"A bool variable in Video function, which gets typecasted to int before being read could result in...","description":"A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel","status":"published","published":"2022-05-14T01:50:35Z","modified":"2023-02-02T05:04:37Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:51:55.393577Z"}],"nvd":[{"id":"CVE-2017-18281","description":"A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel","status":"published","published":"2018-10-29T18:29:00.51Z","modified":"2026-06-17T01:12:32.57Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:19.545286Z"}]}}