CVE-2018-9473

In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-65484460

• CWE-190
• CWE-787

• http://www.securityfocus.com/bid/105481Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/external/libhevc/+/9f0fb67540d2259e4930d9bd5f1a1a6fb95af862Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2018-10-01%2C
• http://www.securityfocus.com/bid/105481Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/external/libhevc/+/9f0fb67540d2259e4930d9bd5f1a1a6fb95af862Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2018-10-01%2C

Published

Oct 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9467In the getHost() function of UriTest.java, there is the poss…9.8
• CVE-2018-9468In query of DownloadManager.java, there is a possible read/w…7.1
• CVE-2018-9469In multiple functions of ShortcutService.java, there is a po…7.8
• CVE-2018-9470In bff_Scanner_addOutPos of Scanner.c, there is a possible o…8.8
• CVE-2018-9471In the deserialization constructor of NanoAppFilter.java, th…7.8
• CVE-2018-9472In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-o…8.8
• CVE-2018-9474In writeToParcel of MediaPlayer.java, there is a possible se…7.8
• CVE-2018-9475In HeadsetInterface::ClccResponse of btif_hf.cc, there is a …8.8
• CVE-2018-9476In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a pos…
• CVE-2018-9477In the development options section of the Settings app, ther…7.8
• CVE-2018-9478In process_service_attr_req and process_service_search_attr_…9.8
• CVE-2018-9479In process_service_attr_req and process_service_search_attr_…9.8