CVE-2018-9594: Integer Overflow

Published Jan 1, 2019

Updated

In llcplinkprocagfpdu of llcplink.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116791157.

Affected Software

7 affected components

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android

Event History

Jan 7, 2019

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Feb 12, 2019

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-9594?

CVE-2018-9594 has a moderate severity level due to possible local information disclosure.

How do I fix CVE-2018-9594?

To fix CVE-2018-9594, users should update their Android devices to a patched version provided by Google.

Which versions of Android are affected by CVE-2018-9594?

CVE-2018-9594 affects Android versions 7.0 to 9.0.

What type of vulnerability is CVE-2018-9594?

CVE-2018-9594 is an out of bounds read vulnerability caused by integer overflow.

Does CVE-2018-9594 require additional privileges to exploit?

No, CVE-2018-9594 does not require any additional execution privileges to exploit.