CVE-2018-9523

In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112859604

• CWE-20

• http://www.securityfocus.com/bid/105847Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-11-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/105847Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-11-01Patch, Vendor Advisory

Published

Nov 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9516In hid_debug_events_read of drivers/hid/hid-debug.c, there i…
• CVE-2018-9517In pppol2tp_connect, there is possible memory corruption due…
• CVE-2018-9518In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a p…
• CVE-2018-9519In easelcomm_hw_build_scatterlist, there is a possible out o…
• CVE-2018-9521In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a pos…
• CVE-2018-9522In the serialization functions of StatsLogEventWrapper.java,…
• CVE-2018-9524In functionality implemented in System UI, there are insuffi…
• CVE-2018-9525In the AndroidManifest.xml file defining the SliceBroadcastR…
• CVE-2018-9526In device configuration data, there is an improperly configu…
• CVE-2018-9527In vorbis_book_decodev_set of codebook.c there is a possible…
• CVE-2018-9528In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s t…
• CVE-2018-9529In ixheaacd_individual_ch_stream of ixheaacd_channel.c there…