CVE-2018-9365: Critical severity Google Android vulnerability
Published Jul 2, 2018
·Updated
In smpdatareceived of smpl2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
8 affected components
Google Android
Google Android=6.0
Google Android=6.0.1
Google Android=7.0
Google Android=7.1.1
Google Android=7.1.2
Google Android=8.0
Google Android=8.1
Remediation
Patch Available
Event History
Jul 2, 2018
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Nov 19, 2024
CVE Published
via MITRE·08:44 PM
Data Sourced
via MITRE·08:44 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-9365?
CVE-2018-9365 is classified as a critical vulnerability that can lead to remote code execution.
2
How do I fix CVE-2018-9365?
To fix CVE-2018-9365, users should update their Android devices to the latest security patch provided by Google.
3
What versions of Android are affected by CVE-2018-9365?
CVE-2018-9365 affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.
4
What type of attack does CVE-2018-9365 facilitate?
CVE-2018-9365 facilitates remote code execution attacks requiring user interaction.
5
What component is vulnerable in CVE-2018-9365?
The vulnerability in CVE-2018-9365 is found in the smp_data_received function of smp_l2c.cc.