CVE-2018-9432: High severity Google Android vulnerability

Published Jul 2, 2018

Updated

In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass. This could lead to local escalation of privilege due to hiding and bypassing the user's ability to disable access to contacts, with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Software

8 affected components

Google Android

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Event History

Jul 2, 2018

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Nov 19, 2024

CVE Published

via MITRE·09:26 PM

Data Sourced

via MITRE·09:26 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-9432?

CVE-2018-9432 is considered to be a medium severity vulnerability due to the potential for local privilege escalation.

How do I fix CVE-2018-9432?

To fix CVE-2018-9432, update your Android device to the latest version provided by Google that addresses this vulnerability.

Which Android versions are affected by CVE-2018-9432?

CVE-2018-9432 affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.

What type of vulnerability is CVE-2018-9432?

CVE-2018-9432 is a permissions bypass vulnerability related to Bluetooth permissions that can lead to local escalation of privileges.

Who is the vendor associated with CVE-2018-9432?

The vendor associated with CVE-2018-9432 is Google, specifically in their Android operating system.