CVE-2018-3594

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05

Description: A buffer over-read can occur when parsing a private frame in an ID3 tag, potentially allowing a remote attacker to impact the confidentiality, integrity, and availability of protected information. This issue is related to the Qualcomm Video Services component in the Android operating system and involves an out-of-bounds operation in memory when processing ID3 metadata.

Recommendations: For Android versions prior to security patch level 2018-04-05, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.