CVE-2018-9438

UnknownEPSS 0.19%

Last modified

CVE-2018-9438 is a vulnerability of currently unknown severity. When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of service of security updates with no additional execution privileges needed. EPSS estimates a 0.19% chance of exploitation in the next 30 days.

Description

When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of service of security updates with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1 Android ID: A-78644887.

Metrics

EPSS Probability
0.19%

9.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
GoogleAndroid8.1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2018-9438?
When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of service of security updates with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1 Android ID: A-78644887.
How severe is CVE-2018-9438?
Severity scoring for CVE-2018-9438 is pending analysis. The EPSS model estimates a 0.19% probability of exploitation in the next 30 days.
How do I fix CVE-2018-9438?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-9438?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST