Skip to content
9.8 Critical

CVE-2018-9365 In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing…

Description

In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products and versions

Product Affected versions Fixed in
Andrioid 8.1 No fix stated
Andrioid 8 No fix stated
Andrioid 7 No fix stated
Andrioid 6.0.1 No fix stated
Andrioid 6 No fix stated
Android 8.1 No fix stated
Android 8 No fix stated
Android 7 No fix stated
Android 6.0.1 No fix stated
Show the other branch
Product Affected versions Fixed in
Android 6 No fix stated
The 2 CVEs of Andrioid →
Track this CVE