CVE-2018-9357
Last modified
CVE-2018-9357 is a vulnerability of currently unknown severity. In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74947856.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 6.0 | |
| Android | 6.0.1 | |
| Android | 7.0 | |
| Android | 7.1.1 | |
| Android | 7.1.2 | |
| Android | 8.0 | |
| Android | 8.1 |
References
- http://www.securityfocus.com/bid/104461Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2018-06-01Patch, Vendor Advisory
- http://www.securityfocus.com/bid/104461Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2018-06-01Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-9357?
How severe is CVE-2018-9357?
How do I fix CVE-2018-9357?
Are you affected by CVE-2018-9357?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST