CVE-2018-9503

In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-80432928

• CWE-125

• http://www.securityfocus.com/bid/105482Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/system/bt/+/92a7bf8c44a236607c146240f3c0adc1ae01fedf%2C
• https://android.googlesource.com/platform/system/bt/+/9fe27a9b445f7e911286ed31c1087ceac567736bVendor Advisory
• https://android.googlesource.com/platform/system/bt/+/d4a34fefbf292d1e02336e4e272da3ef1e3eef85%2C
• https://source.android.com/security/bulletin/2018-10-01%2C
• https://android.googlesource.com/platform/system/bt/+/92a7bf8c44a236607c146240f3c0adc1ae01fedfPatch, Vendor Advisory
• https://android.googlesource.com/platform/system/bt/+/d4a34fefbf292d1e02336e4e272da3ef1e3eef85Vendor Advisory, Patch
• https://source.android.com/security/bulletin/2018-10-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/105482Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/system/bt/+/92a7bf8c44a236607c146240f3c0adc1ae01fedf%2C
• https://android.googlesource.com/platform/system/bt/+/9fe27a9b445f7e911286ed31c1087ceac567736bVendor Advisory
• https://android.googlesource.com/platform/system/bt/+/d4a34fefbf292d1e02336e4e272da3ef1e3eef85%2C
• https://source.android.com/security/bulletin/2018-10-01%2C

Published

Oct 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9496In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there i…
• CVE-2018-9497In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_form…
• CVE-2018-9498In SkSampler::Fill of SkSampler.cpp, there is a possible out…
• CVE-2018-9499In readVector of iCrypto.cpp, there is a possible invalid re…
• CVE-2018-9501In the SetupWizard, there is a possible Factory Reset Protec…
• CVE-2018-9502In rfc_process_mx_message of rfc_ts_frames.cc, there is a po…
• CVE-2018-9504In sdp_copy_raw_data of sdp_discovery.cc, there is a possibl…
• CVE-2018-9505In mca_ccb_hdl_req of mca_cact.cc, there is a possible out o…
• CVE-2018-9506In avrc_msg_cback of avrc_api.cc, there is a possible out-of…
• CVE-2018-9507In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possibl…
• CVE-2018-9508In smp_process_keypress_notification of smp_act.cc, there is…
• CVE-2018-9509In smp_proc_master_id of smp_act.cc, there is a possible out…