CVE-2018-9470: High severity Google Android vulnerability

Published Sep 4, 2018

Updated

In bffScanneraddOutPos of Scanner.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Software

7 affected components

Google Android

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android=9.0

Remediation

Patch Available

https://source.android.com/security/bulletin/2018-09-01

Event History

Sep 4, 2018

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Nov 20, 2024

CVE Published

via MITRE·05:15 PM

Data Sourced

via MITRE·05:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-9470?

The severity of CVE-2018-9470 is classified as moderate due to potential remote escalation of privilege.

How do I fix CVE-2018-9470?

To fix CVE-2018-9470, users should update their Android devices to the latest security patch provided by Google.

What versions of Android are affected by CVE-2018-9470?

CVE-2018-9470 affects Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9.0.

What type of vulnerability is CVE-2018-9470?

CVE-2018-9470 is an out-of-bounds write vulnerability that can be exploited through user interaction.

Is user interaction required to exploit CVE-2018-9470?

Yes, user interaction is required for the successful exploitation of CVE-2018-9470.