CVE-2018-9516

In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-71361580.

• CWE-787

• https://access.redhat.com/errata/RHSA-2019:2029
• https://access.redhat.com/errata/RHSA-2019:2043
• https://lists.debian.org/debian-lts-announce/2018/10/msg00003.htmlThird Party Advisory
• https://source.android.com/security/bulletin/pixel/2018-09-01Patch, Vendor Advisory
• https://usn.ubuntu.com/3871-1/Third Party Advisory
• https://usn.ubuntu.com/3871-3/Third Party Advisory
• https://usn.ubuntu.com/3871-4/Third Party Advisory
• https://usn.ubuntu.com/3871-5/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4308Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:2029
• https://access.redhat.com/errata/RHSA-2019:2043
• https://lists.debian.org/debian-lts-announce/2018/10/msg00003.htmlThird Party Advisory
• https://source.android.com/security/bulletin/pixel/2018-09-01Patch, Vendor Advisory
• https://usn.ubuntu.com/3871-1/Third Party Advisory
• https://usn.ubuntu.com/3871-3/Third Party Advisory
• https://usn.ubuntu.com/3871-4/Third Party Advisory
• https://usn.ubuntu.com/3871-5/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4308Third Party Advisory

Published

Nov 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9509In smp_proc_master_id of smp_act.cc, there is a possible out…
• CVE-2018-9510In smp_proc_enc_info of smp_act.cc, there is a possible out …
• CVE-2018-9511In ipSecSetEncapSocketOwner of XfrmController.cpp, there is …
• CVE-2018-9513In copy_process of fork.c, there is possible memory corrupti…
• CVE-2018-9514In sdcardfs_open of file.c, there is a possible Use After Fr…
• CVE-2018-9515In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a…
• CVE-2018-9517In pppol2tp_connect, there is possible memory corruption due…
• CVE-2018-9518In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a p…
• CVE-2018-9519In easelcomm_hw_build_scatterlist, there is a possible out o…
• CVE-2018-9521In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a pos…
• CVE-2018-9522In the serialization functions of StatsLogEventWrapper.java,…
• CVE-2018-9523In Parcel.writeMapInternal of Parcel.java, there is a possib…