CVE-2018-9480: Input Validation
Published Sep 4, 2018
·Updated
In btahdgetreportact of btahdact.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
4 affected components
Google Android
Google Android=8.0
Google Android=8.1
Google Android=9.0
Remediation
Patch Available
Event History
Sep 4, 2018
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Nov 20, 2024
CVE Published
via MITRE·05:39 PM
Data Sourced
via MITRE·05:39 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-9480?
CVE-2018-9480 is classified as a moderate severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2018-9480?
To fix CVE-2018-9480, update your Android device to the latest security patch provided by Google.
3
What impact does CVE-2018-9480 have on my device?
CVE-2018-9480 can lead to remote information disclosure from your Bluetooth service.
4
Which versions of Android are affected by CVE-2018-9480?
CVE-2018-9480 affects Android versions 8.0, 8.1, and 9.0.
5
Do I need to interact with my device for CVE-2018-9480 to be exploited?
No, user interaction is not needed for the exploitation of CVE-2018-9480.