Unchecked Buffer Access Vulnerability in Android Audio Driver's Event Handler

CVE-2018-3572 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.