CVE-2018-9488

In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalation of privilege, with System privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9.0 Android ID: A-110107376.

• CWE-863

• https://source.android.com/security/bulletin/2018-09-01Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/45379/Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-09-01Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/45379/Third Party Advisory, VDB Entry

Published

Nov 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9482In intr_data_copy_cb of btif_hd.cc, there is a possible out …6.5
• CVE-2018-9483In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a …6.5
• CVE-2018-9484In l2cu_send_peer_config_rej of l2c_utils.cc, there is a pos…7.5
• CVE-2018-9485In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible…6.5
• CVE-2018-9486In hidh_l2cif_data_ind of hidh_conn.cc, there is a possible …6.5
• CVE-2018-9487In setVpnForcedLocked of Vpn.java, there is a possible block…5.5
• CVE-2018-9489When wifi is switched, function sendNetworkStateChangeBroadc…
• CVE-2018-9490In CollectValuesOrEntriesImpl of elements.cc, there is possi…
• CVE-2018-9491In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is …
• CVE-2018-9492In checkGrantUriPermissionLocked of ActivityManagerService.j…
• CVE-2018-9493In the content provider of the download manager, there is a …
• CVE-2018-9496In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there i…