CVE-2018-6246: Google Android

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software reads data past the end, or before the beginning, of the intended buffer, which may lead to Information Disclosure. This issue is rated as moderate. Android: A-69383916. Reference: N-CVE-2018-6246.

Affected products

• Google Android: up to and including 8.1

Published 2018-05-10. Last modified 2026-06-17.