CVE-2018-9381: High severity android vulnerability

Published Dec 2, 2024

Updated

In gattsprocessreadbytypereq of gattsr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected component

Google Android=8.1

Remediation

Patch Available

https://source.android.com/docs/security/bulletin/pixel/2018-06-01

Event History

Dec 2, 2024

CVE Published

via MITRE·07:56 PM

Data Sourced

via MITRE·07:56 PM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-9381?

CVE-2018-9381 is classified as a moderate severity vulnerability due to potential information disclosure.

How can I fix CVE-2018-9381?

To fix CVE-2018-9381, ensure that your Android device is updated to the latest security patch provided by Google.

What impact does CVE-2018-9381 have on Android devices?

CVE-2018-9381 could lead to information disclosure, allowing remote attackers to access uninitialized data without requiring user interaction.

Which version of Android is affected by CVE-2018-9381?

CVE-2018-9381 specifically affects Android version 8.1.

Does CVE-2018-9381 require user interaction to exploit?

No, CVE-2018-9381 can be exploited remotely without any user interaction required.