CVE-2018-9437

In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78656554.

• CWE-125

• http://www.securitytracker.com/id/1041432Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-08-01Patch, Vendor Advisory
• http://www.securitytracker.com/id/1041432Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-08-01Patch, Vendor Advisory

Published

Nov 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9431In OSUInfo of OSUInfo.java, there is a possible escalation o…7.8
• CVE-2018-9432In createPhonebookDialogView and createMapDialogView of Blue…7.8
• CVE-2018-9433In ArrayConcatVisitor of builtins-array.cc, there is a possi…8.8
• CVE-2018-9434In multiple functions of Parcel.cpp, there is a possible way…7.8
• CVE-2018-9435In gatt_process_error_rsp of gatt_cl.cc, there is a possible…5.5
• CVE-2018-9436In bnep_data_ind of bnep_main.cc, there is a possible out of…
• CVE-2018-9438When a device connects only over WiFi VPN, the device may no…
• CVE-2018-9439In __unregister_prot_hook and packet_release of af_packet.c,…6.7
• CVE-2018-9440In parse of M3UParser.cpp there is a possible resource exhau…6.5
• CVE-2018-9441In sdp_copy_raw_data of sdp_discovery.cc, there is a possibl…5.5
• CVE-2018-9444In ih264d_video_decode of ih264d_api.c there is a possible r…
• CVE-2018-9445In readMetadata of Utils.cpp, there is a possible path trave…