CVE-2018-9518

In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-73083945.

• CWE-787

• https://source.android.com/security/bulletin/pixel/2018-09-01Vendor Advisory
• https://usn.ubuntu.com/3798-1/Patch, Third Party Advisory
• https://usn.ubuntu.com/3798-2/Third Party Advisory
• https://source.android.com/security/bulletin/pixel/2018-09-01Vendor Advisory
• https://usn.ubuntu.com/3798-1/Patch, Third Party Advisory
• https://usn.ubuntu.com/3798-2/Third Party Advisory

Published

Dec 7, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9511In ipSecSetEncapSocketOwner of XfrmController.cpp, there is …
• CVE-2018-9513In copy_process of fork.c, there is possible memory corrupti…
• CVE-2018-9514In sdcardfs_open of file.c, there is a possible Use After Fr…
• CVE-2018-9515In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a…
• CVE-2018-9516In hid_debug_events_read of drivers/hid/hid-debug.c, there i…
• CVE-2018-9517In pppol2tp_connect, there is possible memory corruption due…
• CVE-2018-9519In easelcomm_hw_build_scatterlist, there is a possible out o…
• CVE-2018-9521In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a pos…
• CVE-2018-9522In the serialization functions of StatsLogEventWrapper.java,…
• CVE-2018-9523In Parcel.writeMapInternal of Parcel.java, there is a possib…
• CVE-2018-9524In functionality implemented in System UI, there are insuffi…
• CVE-2018-9525In the AndroidManifest.xml file defining the SliceBroadcastR…