CVE-2018-9535: High severity android vulnerability

Published Nov 14, 2018

Updated

In ixheaacdresetacelpdatafix of ixheaacdlpc.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112858010

Affected Software

1 affected component

Google Android=9.0

Event History

Nov 14, 2018

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-9535?

CVE-2018-9535 is classified as a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2018-9535?

To mitigate CVE-2018-9535, users should update their Android device to the latest security patch provided by Google.

What types of devices are affected by CVE-2018-9535?

CVE-2018-9535 specifically affects devices running Android 9.0.

What can attackers achieve by exploiting CVE-2018-9535?

Exploiting CVE-2018-9535 could allow attackers to execute arbitrary code with no additional privileges required.

Does exploiting CVE-2018-9535 require user interaction?

Yes, exploitation of CVE-2018-9535 requires user interaction to be successful.