CVE-2018-6254: Google Android

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

In Android before the 2018-05-05 security patch level, NVIDIA Media Server contains an out-of-bounds read (due to improper input validation) vulnerability which could lead to local information disclosure. This issue is rated as moderate. Android: A-64340684. Reference: N-CVE-2018-6254.

Affected products

• Google Android: up to and including 8.1

Published 2018-05-10. Last modified 2026-06-17.