CVE-2018-9482

CVSS 6.2 MEDIUMEPSS 0.1%CWE-125 CWE-190

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.2EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

20 nov 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

In intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

Google · Android

Referências

https://source.android.com/security/bulletin/2018-09-01