CVE-2018-9445

In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when mounting a USB device with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-80436257.

• CWE-22

• http://www.securitytracker.com/id/1041432Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-08-01Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/45192/Exploit, Patch, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041432Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-08-01Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/45192/Exploit, Patch, Third Party Advisory, VDB Entry

Published

Nov 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9437In getstring of ID3.cpp there is a possible out-of-bounds re…
• CVE-2018-9438When a device connects only over WiFi VPN, the device may no…
• CVE-2018-9439In __unregister_prot_hook and packet_release of af_packet.c,…6.7
• CVE-2018-9440In parse of M3UParser.cpp there is a possible resource exhau…6.5
• CVE-2018-9441In sdp_copy_raw_data of sdp_discovery.cc, there is a possibl…5.5
• CVE-2018-9444In ih264d_video_decode of ih264d_api.c there is a possible r…
• CVE-2018-9446In smp_br_state_machine_event of smp_br_main.cc, there is a …
• CVE-2018-9447In onCreate of EmergencyCallbackModeExitDialog.java, there i…5.5
• CVE-2018-9448In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible …
• CVE-2018-9449In process_service_search_attr_rsp of sdp_discovery.cc, ther…5.5
• CVE-2018-9450In avrc_proc_vendor_command of avrc_api.cc, there is a possi…
• CVE-2018-9451In DynamicRefTable::load of ResourceTypes.cpp, there is a po…