cve/2017/CVE-2017-18158.md

### [CVE-2017-18158](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18158)
![](https://img.shields.io/static/v1?label=Product&message=Android%20for%20MSM%2C%20Firefox%20OS%20for%20MSM%2C%20QRD%20Android&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Copy%20Without%20Checking%20Size%20of%20Input%20in%20Boot&color=brighgreen)

### Description

Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05 while flashing images.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon