Vulnerabilities > CVE-2018-5850 - Integer Underflow (Wrap or Wraparound) vulnerability in Google Android
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 |