Skip to content
7.8 High

CVE-2018-9414 In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due…

Description

In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Affected products and versions

Product Affected versions Fixed in
Android 8.1 No fix stated
Android 8 No fix stated
Android 7.1 7.1.1 → 7.1.2 No fix stated
Android 7 No fix stated
Android 6.0.1 No fix stated
Android 6 No fix stated
pixel 2018 earliest → < 2018-07-05 2018-07-05
The 1729 CVEs of Android →
Track this CVE