CVE-2018-9575: Critical severity android vulnerability

Published Dec 7, 2018

Updated

In impdparsedwnmixinstructions of impddrcstaticpayload.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-116619387.

Affected Software

1 affected component

Google Android=9.0

Event History

Dec 7, 2018

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

DescriptionWeakness

Frequently Asked Questions

What must an attacker do to exploit this issue?

Exploitation requires user interaction. The vulnerability is an out-of-bounds write in the downmix-instruction parsing code and may allow remote code execution without requiring additional execution privileges.

Which Android versions are identified as affected?

The provided data identifies Android 9 as affected.

How can I track this issue in Android security documentation?

Use Android issue ID A-116619387 and consult the referenced Android security bulletin dated 2018-11-01.

CVE-2018-9575: Critical severity android vulnerability

Affected Software

Event History

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which Android versions are identified as affected?

How can I track this issue in Android security documentation?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which Android versions are identified as affected?

How can I track this issue in Android security documentation?