{"id":"CVE-2018-5886","aliases":["EUVD-2018-17653","GHSA-hq29-m595-3gjq"],"status":"published","title":"A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using...","description":"A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00596,"percentile":0.48759,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2018-07-06T19:00:00Z","modified":"2026-06-17T02:00:58Z","products":[{"vendor":"google","product":"android"},{"vendor":"qualcomm, inc.","product":"android for msm, firefox os for msm, qrd android"}],"references":[{"url":"https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=97017d59158086689488bdcfcafb59654a6f10da","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5886"},{"url":"https://github.com/advisories/GHSA-hq29-m595-3gjq"}],"sources":{"cve":[{"id":"CVE-2018-5886","description":"A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed.","status":"published","published":"2018-07-06T19:00:00Z","modified":"2024-09-17T01:00:51.505Z","updated_at":"2026-11-02T14:35:01.28843Z"}],"euvd":[{"id":"EUVD-2018-17653","description":"A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed.","status":"published","published":"2018-07-06T19:00:00Z","modified":"2024-09-17T01:00:51Z","updated_at":"2026-11-03T00:28:53.686001Z"}],"ghsa":[{"id":"GHSA-hq29-m595-3gjq","title":"A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using...","description":"A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed.","status":"published","published":"2022-05-14T03:03:42Z","modified":"2023-02-02T05:07:08Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:52:26.447554Z"}],"nvd":[{"id":"CVE-2018-5886","description":"A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed.","status":"published","published":"2018-07-06T19:29:01.107Z","modified":"2026-06-17T02:00:58.33Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:31.362791Z"}]}}