CVE-2018-9530

In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112609715

• CWE-787

• https://source.android.com/security/bulletin/2018-11-01Vendor Advisory
• https://source.android.com/security/bulletin/2018-11-01Vendor Advisory

Published

Nov 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9524In functionality implemented in System UI, there are insuffi…
• CVE-2018-9525In the AndroidManifest.xml file defining the SliceBroadcastR…
• CVE-2018-9526In device configuration data, there is an improperly configu…
• CVE-2018-9527In vorbis_book_decodev_set of codebook.c there is a possible…
• CVE-2018-9528In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s t…
• CVE-2018-9529In ixheaacd_individual_ch_stream of ixheaacd_channel.c there…
• CVE-2018-9531In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a po…
• CVE-2018-9532In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c the…
• CVE-2018-9533In ixheaacd_dec_data_init of ixheaacd_create.c there is a po…
• CVE-2018-9534In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there i…
• CVE-2018-9535In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is …
• CVE-2018-9536In numerous functions of libFDK, there are possible out of b…