CVE-2018-9340: High severity Google Android vulnerability
Published Jun 4, 2018
·Updated
In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information disclosure.
Affected Software
8 affected components
Google Android
Google Android=6.0
Google Android=6.0.1
Google Android=7.0
Google Android=7.1.1
Google Android=7.1.2
Google Android=8.0
Google Android=8.1
Remediation
Patch Available
Event History
Jun 4, 2018
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Nov 19, 2024
CVE Published
via MITRE·06:48 PM
Data Sourced
via MITRE·06:48 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-9340?
The severity of CVE-2018-9340 is considered moderate due to the potential for information disclosure.
2
How do I fix CVE-2018-9340?
To fix CVE-2018-9340, update your Android device to the latest security patch provided by Google.
3
Which versions of Android are affected by CVE-2018-9340?
CVE-2018-9340 affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.
4
What kind of vulnerability is CVE-2018-9340?
CVE-2018-9340 is an out-of-bounds write vulnerability that can lead to information disclosure.
5
Can CVE-2018-9340 be exploited remotely?
CVE-2018-9340 may be exploited if an attacker has access to manipulate the affected Android system.