CVE-2018-9533: Buffer Overflow
Published Nov 14, 2018
·Updated
In ixheaacddecdatainit of ixheaacdcreate.c there is a possible out of write read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112766520
Affected Software
1 affected component
Google Android=9.0
Event History
Nov 14, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-9533?
CVE-2018-9533 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2018-9533?
To mitigate CVE-2018-9533, update your Android device to a version above Android 9.0 where the vulnerability is patched.
3
What systems are affected by CVE-2018-9533?
CVE-2018-9533 affects devices running Android 9.0.
4
What type of attack is possible with CVE-2018-9533?
CVE-2018-9533 allows for remote code execution, enabling attackers to run arbitrary code on the affected device.
5
Is user interaction required for exploitation of CVE-2018-9533?
Yes, user interaction is necessary to exploit CVE-2018-9533.