CVE-2018-9347: Input Validation

Published Jun 4, 2018

Updated

In function SMFParseMetaEvent of file eassmf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-68664359

Affected Software

7 affected components

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android

Event History

Jun 4, 2018

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Nov 14, 2018

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-9347?

CVE-2018-9347 has a moderate severity as it can lead to a remote temporary Denial of Service (DoS).

How do I fix CVE-2018-9347?

To fix CVE-2018-9347, update your Android device to the latest available version that addresses the vulnerability.

Which versions of Android are affected by CVE-2018-9347?

CVE-2018-9347 affects Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9.0.

What can exploit CVE-2018-9347?

CVE-2018-9347 can be exploited remotely, but it requires user interaction to trigger the vulnerability.

What type of attack does CVE-2018-9347 represent?

CVE-2018-9347 represents a potential Denial of Service (DoS) attack due to an infinite loop resulting from incorrect input validation.