CVE-2018-9471: Critical severity Google Android vulnerability
Published Sep 4, 2018
·Updated
In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
7 affected components
Google Android
Google Android=7.0
Google Android=7.1.1
Google Android=7.1.2
Google Android=8.0
Google Android=8.1
Google Android=9.0
Remediation
Patch Available
Event History
Sep 4, 2018
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Nov 20, 2024
CVE Published
via MITRE·05:16 PM
Data Sourced
via MITRE·05:16 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-9471?
CVE-2018-9471 has a medium severity rating due to potential local escalation of privilege.
2
How do I fix CVE-2018-9471?
To fix CVE-2018-9471, upgrade to a patched version of Android that addresses this vulnerability.
3
Which versions of Android are affected by CVE-2018-9471?
CVE-2018-9471 affects Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9.0.
4
Is user interaction required to exploit CVE-2018-9471?
No, user interaction is not needed to exploit CVE-2018-9471.
5
What could be the consequences of exploiting CVE-2018-9471?
Exploiting CVE-2018-9471 could lead to local escalation of privilege in the system server.