CVE-2018-9578: Critical severity android vulnerability

Published Dec 7, 2018

Updated

In ixheaacdadtscrcstartreg of ixheaacdadtscrccheck.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-113261928.

Affected Software

1 affected component

Google Android=9.0

Event History

Dec 7, 2018

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

DescriptionWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The issue is remotely exploitable, requires no privileges, and does not require user interaction. It is caused by an out-of-bounds write from a missing bounds check in ixheaacd_adts_crc_start_reg.

Which Android versions are identified as affected?

The provided data identifies Android 9 as affected.

What level of impact could successful exploitation have?

Successful exploitation could lead to escalation of privilege. The CVSS vector indicates high impact to confidentiality, integrity, and availability.

CVE-2018-9578: Critical severity android vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which Android versions are identified as affected?

What level of impact could successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which Android versions are identified as affected?

What level of impact could successful exploitation have?