CVE-2018-9560: High severity Google Android vulnerability
In HIDDevAddRecord of hiddapi.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth service with User execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-79946737.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
The affected product and version identified in the data are Google Android 9. Exploitation is local, so a remote attacker cannot use this issue without first obtaining local code execution.
What does an attacker need to exploit it?
An attacker needs User-level execution privileges on the device. No user interaction is required once those privileges are available.
What is the likely impact of successful exploitation?
Successful exploitation could allow local escalation of privilege in the Bluetooth service. The supplied CVSS vector indicates high impact to confidentiality, integrity, and availability.
How can I identify whether a device may be affected?
Check whether the device is running Android 9 and assess whether it has the Android security fix associated with Android ID A-79946737. The vulnerability is in the Bluetooth component's HID_DevAddRecord function.