CVE-2017-18057

CVE-2017-18057 is a high-severity vulnerability affecting Android devices utilizing the Linux kernel from CAF, specifically impacting the wma_nlo_scan_cmp_evt_handler() function. It stems from improper input validation of a vdev ID received from firmware, leading to a potential out-of-bounds memory read. The vulnerability has a CVSS score of 7.5, indicating a high risk, and can be exploited remotely without user interaction, potentially resulting in a complete compromise of confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE.