Skip to content
CVE Tracker
Back

CVE-2018-3579

In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel,…

Medium5.5EPSS 0.16%
Published
Updated
Reserved
Assigned by
qualcomm

Description

In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, event->num_entries_in_page is a value received from firmware that is not properly validated which can lead to a buffer over-read

Scores

CVSS scores of CVE-2018-3579, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0Medium5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS (exploitation in 30 days)
0.16% · top 95% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

Affected products

  • Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

    • affected All Android releases from CAF using the Linux kernel

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .