CVE-2018-9477: High severity Google Android vulnerability
Published Sep 4, 2018
·Updated
In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
3 affected components
Google Android
Google Android=8.0
Google Android=8.1
Remediation
Patch Available
Event History
Sep 4, 2018
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Nov 20, 2024
CVE Published
via MITRE·05:28 PM
Data Sourced
via MITRE·05:28 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-9477?
CVE-2018-9477 is classified as a high-severity vulnerability due to its potential for local privilege escalation.
2
How do I fix CVE-2018-9477?
To fix CVE-2018-9477, update your Android device to the latest security patch provided by Google.
3
What versions of Android are affected by CVE-2018-9477?
CVE-2018-9477 affects Android versions 8.0 and 8.1.
4
What kind of exploit does CVE-2018-9477 allow?
CVE-2018-9477 allows for a local authentication bypass leading to privilege escalation.
5
Is user interaction required to exploit CVE-2018-9477?
Yes, user interaction is required to exploit CVE-2018-9477.