CVE-2018-9489: Infoleak

Published Nov 6, 2018

Updated

When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This could lead to information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-77286245.

Affected Software

6 affected components

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android=9.0

Event History

Nov 6, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-9489?

CVE-2018-9489 is rated as a high-severity vulnerability due to its potential for information disclosure.

How do I fix CVE-2018-9489?

To mitigate CVE-2018-9489, update your Android device to the latest available version that has patched this vulnerability.

Which versions of Android are affected by CVE-2018-9489?

CVE-2018-9489 affects Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9.0.

What type of vulnerability is CVE-2018-9489?

CVE-2018-9489 is an information disclosure vulnerability that allows detailed WiFi network information to be broadcasted.

Is user interaction required for exploiting CVE-2018-9489?

No, exploitation of CVE-2018-9489 does not require any user interaction.