CVE-2018-9421: Medium severity Google Android vulnerability

Published Jul 2, 2018

Updated

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

8 affected components

Google Android

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Remediation

Patch Available

https://source.android.com/security/bulletin/2018-07-01

Event History

Jul 2, 2018

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Nov 19, 2024

CVE Published

via MITRE·09:22 PM

Data Sourced

via MITRE·09:22 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-9421?

CVE-2018-9421 is classified as a medium severity vulnerability due to information leakage risks.

How do I fix CVE-2018-9421?

To fix CVE-2018-9421, ensure your Android device is updated to a patched version that addresses this vulnerability.

Who is affected by CVE-2018-9421?

CVE-2018-9421 affects Android versions 6.0 through 8.1, including all security updates prior to the patches.

What type of vulnerability is CVE-2018-9421?

CVE-2018-9421 is an information disclosure vulnerability that can leak uninitialized data across processes.

Does exploiting CVE-2018-9421 require user interaction?

No, exploiting CVE-2018-9421 does not require user interaction to be successful.