Not rated
CVE-2018-9363 In the hidp_process_report in bluetooth, there is an integer overflow
Description
In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Android | Versions not published |
References
- USN-3797-2 usn.ubuntu.com
- USN-3797-1 usn.ubuntu.com
- [debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update lists.debian.org
- USN-3820-1 usn.ubuntu.com
- USN-3820-2 usn.ubuntu.com
- RHSA-2018:2948 access.redhat.com
- DSA-4308 www.debian.org
- source.android.com source.android.com
- USN-3822-2 usn.ubuntu.com
- USN-3822-1 usn.ubuntu.com
- USN-3820-3 usn.ubuntu.com
- RHSA-2019:2043 access.redhat.com
- RHSA-2019:2029 access.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Android
The 960 CVEs of Android →
CVE-2018-9578
In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of bounds write due to a missing…
Not rated
CVE-2018-9576
In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to…
Not rated
CVE-2018-9575
In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing…
Not rated
CVE-2018-9518
In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check
Not rated