CVE-2018-9502: Medium severity Google Android vulnerability
In rfcprocessmxmessage of rfctsframes.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111936792
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-9502?
The severity of CVE-2018-9502 is considered moderate due to the possibility of remote information disclosure.
How do I fix CVE-2018-9502?
To fix CVE-2018-9502, update your Android device to the latest version provided by Google that addresses this vulnerability.
What versions of Android are affected by CVE-2018-9502?
CVE-2018-9502 affects Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9.0.
Can CVE-2018-9502 be exploited without user interaction?
Yes, CVE-2018-9502 can be exploited remotely without any user interaction required.
What kind of vulnerability is CVE-2018-9502?
CVE-2018-9502 is an out-of-bounds read vulnerability that could lead to information disclosure in the Bluetooth service.