CVE-2018-9423: Medium severity android vulnerability
Published Dec 2, 2024
·Updated
In ihevcdparsesliceheader of ihevcdparsesliceheader.c there is a possible out of bound read due to missing bounds check. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
5 affected components
Google Android=7.0
Google Android=7.1.1
Google Android=7.1.2
Google Android=8.0
Google Android=8.1
Remediation
Event History
Dec 2, 2024
CVE Published
via MITRE·09:26 PM
Data Sourced
via MITRE·09:26 PM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-9423?
CVE-2018-9423 has a medium severity level due to its potential to cause denial of service.
2
How do I fix CVE-2018-9423?
To fix CVE-2018-9423, users should update their Android devices to the latest security patch provided by Google.
3
What are the affected versions for CVE-2018-9423?
CVE-2018-9423 affects Android versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.
4
What kind of exploit can CVE-2018-9423 lead to?
CVE-2018-9423 can lead to a denial of service condition, which may disrupt normal device operation.
5
Is user interaction required for CVE-2018-9423 exploitation?
Yes, exploitation of CVE-2018-9423 requires user interaction to trigger the vulnerability.