CVE-2018-9415

In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69129004 References: Upstream kernel.

• CWE-415

• https://source.android.com/security/bulletin/pixel/2018-07-01Patch, Vendor Advisory
• https://usn.ubuntu.com/3752-1/Third Party Advisory
• https://usn.ubuntu.com/3752-2/Third Party Advisory
• https://usn.ubuntu.com/3752-3/Third Party Advisory
• https://source.android.com/security/bulletin/pixel/2018-07-01Patch, Vendor Advisory
• https://usn.ubuntu.com/3752-1/Third Party Advisory
• https://usn.ubuntu.com/3752-2/Third Party Advisory
• https://usn.ubuntu.com/3752-3/Third Party Advisory

Published

Nov 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9409In HWCSession::SetColorModeById of hwc_session.cpp, there is…7.8
• CVE-2018-9410In analyzeAxes of FontUtils.cpp, there is a possible out of …5.5
• CVE-2018-9411In decrypt of ClearKeyCasPlugin.cpp there is a possible out-…8.8
• CVE-2018-9412In removeUnsynchronization of ID3.cpp there is a possible re…5.5
• CVE-2018-9413In handle_notification_response of btif_rc.cc, there is a po…8.8
• CVE-2018-9414In gattServerSendResponseNative of com_android_bluetooth_gat…7.8
• CVE-2018-9416In sg_remove_scat of scsi/sg.c, there is a possible memory c…6.7
• CVE-2018-9417In f_hidg_read and hidg_disable of f_hid.c, there is a possi…7.8
• CVE-2018-9418In handle_app_cur_val_response of dtif_rc.cc, there is a pos…9.8
• CVE-2018-9419In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible…7.5
• CVE-2018-9420In BnCameraService::onTransact of CameraService.cpp, there i…5.5
• CVE-2018-9421In writeInplace of Parcel.cpp, there is a possible informati…5.5