CVE-2018-9506

In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111803925

• CWE-125

• http://www.securityfocus.com/bid/105482Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/system/bt/+/830cb39cb2a0f1bf6704d264e2a5c5029c175dd7Patch, Vendor Advisory
• https://source.android.com/security/bulletin/2018-10-01%2C
• https://source.android.com/security/bulletin/2018-10-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/105482Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/system/bt/+/830cb39cb2a0f1bf6704d264e2a5c5029c175dd7Patch, Vendor Advisory
• https://source.android.com/security/bulletin/2018-10-01%2C

Published

Oct 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9499In readVector of iCrypto.cpp, there is a possible invalid re…
• CVE-2018-9501In the SetupWizard, there is a possible Factory Reset Protec…
• CVE-2018-9502In rfc_process_mx_message of rfc_ts_frames.cc, there is a po…
• CVE-2018-9503In rfc_process_mx_message of rfc_ts_frames.cc, there is a po…
• CVE-2018-9504In sdp_copy_raw_data of sdp_discovery.cc, there is a possibl…
• CVE-2018-9505In mca_ccb_hdl_req of mca_cact.cc, there is a possible out o…
• CVE-2018-9507In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possibl…
• CVE-2018-9508In smp_process_keypress_notification of smp_act.cc, there is…
• CVE-2018-9509In smp_proc_master_id of smp_act.cc, there is a possible out…
• CVE-2018-9510In smp_proc_enc_info of smp_act.cc, there is a possible out …
• CVE-2018-9511In ipSecSetEncapSocketOwner of XfrmController.cpp, there is …
• CVE-2018-9513In copy_process of fork.c, there is possible memory corrupti…