CVE-2018-6246: Infoleak
In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software reads data past the end, or before the beginning, of the intended buffer, which may lead to Information Disclosure. This issue is rated as moderate. Android: A-69383916. Reference: N-CVE-2018-6246.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the Android fix so devices are not running Android before the 2018-05-05 security patch level, addressing NVIDIA Widevine Trustlet (Widevine TA) info disclosure related to N-CVE-2018-6246.
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6246?
CVE-2018-6246 is rated as moderate.
How do I fix CVE-2018-6246?
To fix CVE-2018-6246, update your Android device to the 2018-05-05 security patch level or later.
Which versions of Android are affected by CVE-2018-6246?
CVE-2018-6246 affects Android versions prior to 8.1 up until the 2018-05-05 security patch level.
What does CVE-2018-6246 vulnerability lead to?
CVE-2018-6246 may lead to information disclosure due to improper buffer handling.
What component of Android is impacted by CVE-2018-6246?
CVE-2018-6246 impacts the NVIDIA Widevine Trustlet within Android.