CVE-2018-9452

In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This could lead to remote denial of service if a contact with many hidden unicode characters were sent to the device and used by a local app, with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-78464361

• CWE-20

• http://www.securityfocus.com/bid/105484Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/frameworks/base/+/3b6f84b77c30ec0bab5147b0cffc192c86ba2634Patch, Third Party Advisory
• https://android.googlesource.com/platform/frameworks/base/+/54f661b16b308cf38d1b9703214591c0f83df64d%2C
• https://source.android.com/security/bulletin/2018-10-01%2C
• http://www.securityfocus.com/bid/105484Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/frameworks/base/+/3b6f84b77c30ec0bab5147b0cffc192c86ba2634Patch, Third Party Advisory
• https://android.googlesource.com/platform/frameworks/base/+/54f661b16b308cf38d1b9703214591c0f83df64d%2C
• https://source.android.com/security/bulletin/2018-10-01%2C

Published

Oct 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9446In smp_br_state_machine_event of smp_br_main.cc, there is a …
• CVE-2018-9447In onCreate of EmergencyCallbackModeExitDialog.java, there i…5.5
• CVE-2018-9448In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible …
• CVE-2018-9449In process_service_search_attr_rsp of sdp_discovery.cc, ther…5.5
• CVE-2018-9450In avrc_proc_vendor_command of avrc_api.cc, there is a possi…
• CVE-2018-9451In DynamicRefTable::load of ResourceTypes.cpp, there is a po…
• CVE-2018-9453In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out …
• CVE-2018-9454In bnep_data_ind of bnep_main.cc, there is a possible out of…
• CVE-2018-9455In sdpu_extract_attr_seq of sdp_utils.cc, there is a possibl…
• CVE-2018-9456In sdpu_extract_attr_seq of sdp_utils.cc, there is a possibl…7.5
• CVE-2018-9457In onCheckedChanged of BluetoothPairingController.java, ther…
• CVE-2018-9458In computeFocusedWindow of RootWindowContainer.java, and rel…