CVE-2018-9556

In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-113118184.

• CWE-190
• CWE-787

• http://www.securityfocus.com/bid/106147Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-12-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/106147Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-12-01Patch, Vendor Advisory

Published

Dec 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9550In CAacDecoder_Init of aacdecoder.cpp, there is a possible o…7.8
• CVE-2018-9551In CAacDecoder_Init of aacdecoder.cpp, there is a possible o…7.8
• CVE-2018-9552In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible …5.5
• CVE-2018-9553In MasteringMetadata::Parse of mkvparser.cc there is a possi…7.8
• CVE-2018-9554In dumpExtractors of IMediaExtractor.cp, there is a possible…
• CVE-2018-9555In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out o…8.8
• CVE-2018-9557In really_install_package of install.cpp, there is a possibl…
• CVE-2018-9558In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a po…7.8
• CVE-2018-9559In persist_set_key and other functions of cryptfs.cpp, there…
• CVE-2018-9560In HID_DevAddRecord of hidd_api.cc, there is a possible out-…7.8
• CVE-2018-9561In llcp_util_parse_connect of llcp_util.cc, there is a possi…
• CVE-2018-9562In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-…7.5