Not rated
CVE-2018-9499 In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data
Description
In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DRM server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-79218474
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Android | Versions not published |
References
- source.android.com source.android.com
- 105481 www.securityfocus.com
- android.googlesource.com android.googlesource.com
Timeline
- Published
- Last modified
Other CVEs of Android
The 960 CVEs of Android →
CVE-2018-9577
In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to…
Not rated
CVE-2018-9517
In pppol2tp_connect, there is possible memory corruption due to a use after free
Not rated
CVE-2018-9519
In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition
Not rated
CVE-2018-9569
In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect…
Not rated