AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2018-3594

CRITICAL · CVSS 9.8 EPSS 1.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-04-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2018-3594
Severity
CRITICAL
CVSS
9.8
EPSS
1.32%
Android

Original Filing — NVD Description

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing a private frame in an ID3 tag, a buffer over-read can occur when comparing frame data with predefined owner identifier strings.