CVE-2018-9359

In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74196706.

• CWE-125

• http://www.securityfocus.com/bid/104461Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-06-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/104461Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-06-01Patch, Vendor Advisory

Published

Nov 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9353In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is …6.5
• CVE-2018-9354In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit,…6.5
• CVE-2018-9355In bta_dm_sdp_result of bta_dm_act.cc, there is a possible o…
• CVE-2018-9356In bnep_data_ind of bnep_main.c, there is a possible remote …
• CVE-2018-9357In BNEP_Write of bnep_api.cc, there is a possible out of bou…
• CVE-2018-9358In gatts_process_attribute_req of gatt_sc.cc, there is a pos…
• CVE-2018-9360In process_l2cap_cmd of l2c_main.cc, there is a possible out…
• CVE-2018-9361In process_l2cap_cmd of l2c_main.cc, there is a possible out…
• CVE-2018-9362In processMessagePart of InboundSmsHandler.java, there is a …
• CVE-2018-9363In the hidp_process_report in bluetooth, there is an integer…8.4
• CVE-2018-9364In the LG LAF component, there is a special command that all…7.5
• CVE-2018-9365In smp_data_received of smp_l2c.cc, there is a possible out …8.8