VDB
CVE-2018-9351
CVE-2018-9351
PUBLISHED
CVSS 6.5 MEDIUM
In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
EPSS 0.27% · 19.9th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
0.27%
19.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 7.0, 7.1.1, 7.1.2 | |
| Android | 7, 7.1.1, 7.1.2 |
Timeline
- Nov 27, 2024 CVE Published
- Nov 27, 2024 PoC Published
- Nov 28, 2024 EPSS Score
- Dec 16, 2024 EPSS Score
- Dec 18, 2024 CVE Updated
- Jan 3, 2025 EPSS Score
- Jan 20, 2025 EPSS Score
- Feb 7, 2025 EPSS Score
- Feb 24, 2025 EPSS Score
- Mar 14, 2025 EPSS Score
- Mar 31, 2025 EPSS Score
- Apr 18, 2025 EPSS Score