CVE-2018-9455: High severity Google Android vulnerability

Published Aug 6, 2018

Updated

In sdpuextractattrseq of sdputils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78136677.

Affected Software

8 affected components

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2018-08-01

Event History

Aug 6, 2018

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Nov 6, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-9455?

CVE-2018-9455 has a medium severity rating due to its potential for remote denial of service.

How do I fix CVE-2018-9455?

To fix CVE-2018-9455, update your affected Android device to the latest security patch provided by Google.

What versions of Android are affected by CVE-2018-9455?

CVE-2018-9455 affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.

Is user interaction required to exploit CVE-2018-9455?

No, user interaction is not required to exploit CVE-2018-9455; it can be exploited remotely.

What type of vulnerability is CVE-2018-9455?

CVE-2018-9455 is an out-of-bounds read vulnerability that can lead to denial of service.