CVE-2018-9536

In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112662184

• CWE-787

• http://www.securityfocus.com/bid/105865Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-11-01Vendor Advisory
• http://www.securityfocus.com/bid/105865Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-11-01Vendor Advisory

Published

Nov 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9530In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is…
• CVE-2018-9531In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a po…
• CVE-2018-9532In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c the…
• CVE-2018-9533In ixheaacd_dec_data_init of ixheaacd_create.c there is a po…
• CVE-2018-9534In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there i…
• CVE-2018-9535In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is …
• CVE-2018-9537In CAacDecoder_DecodeFrame of aacdecode.cpp, there is a poss…
• CVE-2018-9538In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_vi…7.8
• CVE-2018-9539In the ClearKey CAS descrambler, there is a possible use aft…
• CVE-2018-9540In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a p…
• CVE-2018-9541In avrc_pars_vendor_rsp of avcr_pars_ct.cc, there is a possi…
• CVE-2018-9542In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possi…