CVE-2018-9569: Critical severity android vulnerability

Published Dec 7, 2018

Updated

In impdinitdrcdecodepostconfig of impddrcgaindecoder.c there is a possible out-of-bound write due to incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-113885537.

Affected Software

1 affected component

Google Android=9.0

Event History

Dec 7, 2018

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

DescriptionWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker can exploit it remotely without authentication or additional execution privileges, but exploitation requires user interaction.

Which Android version is identified as affected?

The provided data identifies Android 9 as affected.

What component is involved in the vulnerability?

The out-of-bounds write is in impd_init_drc_decode_post_config within impd_drc_gain_decoder.c.

CVE-2018-9569: Critical severity android vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which Android version is identified as affected?

What component is involved in the vulnerability?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which Android version is identified as affected?

What component is involved in the vulnerability?