CVE-2018-9362: Input Validation

Published Jun 4, 2018

Updated

In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-72298611.

Affected Software

8 affected components

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2018-06-01

Event History

Jun 4, 2018

CVE Published

via Android·12:00 AM

Nov 6, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-9362?

CVE-2018-9362 is classified as a remote denial of service vulnerability.

How does CVE-2018-9362 affect Android devices?

CVE-2018-9362 affects various versions of Android, specifically versions 6.0 through 8.1.

What is the impact of CVE-2018-9362?

The impact of CVE-2018-9362 is that it could lead to remote denial of service without requiring user interaction.

How do I fix CVE-2018-9362?

To fix CVE-2018-9362, update your Android device to the latest security patch provided by Google.

Is user interaction needed to exploit CVE-2018-9362?

No, user interaction is not needed for exploiting CVE-2018-9362.