CVE-2018-9505: Medium severity Google Android vulnerability
In mcaccbhdlreq of mcacact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-110791536
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-9505?
CVE-2018-9505 has a severity level of moderate, as it may allow for remote information disclosure.
How do I fix CVE-2018-9505?
To fix CVE-2018-9505, ensure that your Android device is updated to a version released after October 2018.
Which Android versions are affected by CVE-2018-9505?
CVE-2018-9505 affects Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9.0.
Does CVE-2018-9505 require user interaction to exploit?
No, CVE-2018-9505 does not require user interaction for exploitation.
What type of vulnerability is CVE-2018-9505?
CVE-2018-9505 is an out of bounds read vulnerability in Bluetooth handling in Android.