CVE-2018-9525

In the AndroidManifest.xml file defining the SliceBroadcastReceiver handler for com.android.settings.slice.action.WIFI_CHANGED, there is a possible permissions bypass due to a confused deputy. This could lead to local escalation of privilege, allowing a local attacker to change device settings, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-111330641

• http://www.securityfocus.com/bid/105848Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-11-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/105848Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-11-01Patch, Vendor Advisory

Published

Nov 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9518In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a p…
• CVE-2018-9519In easelcomm_hw_build_scatterlist, there is a possible out o…
• CVE-2018-9521In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a pos…
• CVE-2018-9522In the serialization functions of StatsLogEventWrapper.java,…
• CVE-2018-9523In Parcel.writeMapInternal of Parcel.java, there is a possib…
• CVE-2018-9524In functionality implemented in System UI, there are insuffi…
• CVE-2018-9526In device configuration data, there is an improperly configu…
• CVE-2018-9527In vorbis_book_decodev_set of codebook.c there is a possible…
• CVE-2018-9528In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s t…
• CVE-2018-9529In ixheaacd_individual_ch_stream of ixheaacd_channel.c there…
• CVE-2018-9530In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is…
• CVE-2018-9531In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a po…