CVE-2018-9448

In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-79944113.

• CWE-125

• http://www.securitytracker.com/id/1041432Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-08-01Patch, Vendor Advisory
• http://www.securitytracker.com/id/1041432Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-08-01Patch, Vendor Advisory

Published

Nov 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9440In parse of M3UParser.cpp there is a possible resource exhau…6.5
• CVE-2018-9441In sdp_copy_raw_data of sdp_discovery.cc, there is a possibl…5.5
• CVE-2018-9444In ih264d_video_decode of ih264d_api.c there is a possible r…
• CVE-2018-9445In readMetadata of Utils.cpp, there is a possible path trave…
• CVE-2018-9446In smp_br_state_machine_event of smp_br_main.cc, there is a …
• CVE-2018-9447In onCreate of EmergencyCallbackModeExitDialog.java, there i…5.5
• CVE-2018-9449In process_service_search_attr_rsp of sdp_discovery.cc, ther…5.5
• CVE-2018-9450In avrc_proc_vendor_command of avrc_api.cc, there is a possi…
• CVE-2018-9451In DynamicRefTable::load of ResourceTypes.cpp, there is a po…
• CVE-2018-9452In getOffsetForHorizontal of Layout.java, there is a possibl…
• CVE-2018-9453In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out …
• CVE-2018-9454In bnep_data_ind of bnep_main.cc, there is a possible out of…