{"id":"CVE-2018-3582","aliases":["EUVD-2018-15436","GHSA-m4mc-6434-7wx3"],"status":"published","title":"Buffer overflow can occur due to improper input validation in multiple WMA event handler...","description":"Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00162,"percentile":0.05387,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-20"],"published":"2018-06-12T20:00:00Z","modified":"2026-06-17T01:57:30Z","products":[{"vendor":"google","product":"android"},{"vendor":"qualcomm, inc.","product":"android for msm, firefox os for msm, qrd android"}],"references":[{"url":"https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3582"},{"url":"https://source.android.com/security/bulletin/pixel/2018-05-01","tags":["Third Party Advisory"]},{"url":"https://github.com/advisories/GHSA-m4mc-6434-7wx3"}],"sources":{"cve":[{"id":"CVE-2018-3582","description":"Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.","status":"published","published":"2018-06-12T20:00:00Z","modified":"2024-09-16T17:23:48.083Z","updated_at":"2026-11-02T14:35:05.262903Z"}],"euvd":[{"id":"EUVD-2018-15436","description":"Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.","status":"published","published":"2018-06-12T20:00:00Z","modified":"2024-09-16T17:23:48Z","updated_at":"2026-11-03T00:55:42.486621Z"}],"ghsa":[{"id":"GHSA-m4mc-6434-7wx3","title":"Buffer overflow can occur due to improper input validation in multiple WMA event handler...","description":"Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.","status":"published","published":"2022-05-14T03:10:05Z","modified":"2023-02-02T05:07:20Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:28.96683Z"}],"nvd":[{"id":"CVE-2018-3582","description":"Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.","status":"published","published":"2018-06-12T20:29:00.75Z","modified":"2026-06-17T01:57:30.127Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-119"],"updated_at":"2026-11-02T14:04:29.837913Z"}]}}
