AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-10689

MEDIUM · CVSS 5.5 EPSS 1.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-05-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-10689
Severity
MEDIUM
CVSS
5.5
EPSS
1.96%
Linux Android

Original NVD Description

blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file.