CVE-2018-9353

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Nov 27, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2018

CVE-2018-93546.5In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could leaCVE-2018-93559.8In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remotCVE-2018-93569.8In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution wiCVE-2018-93577.8In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation CVE-2018-93587.5In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead CVE-2018-93597.5In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informaCVE-2018-93607.5In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informaCVE-2018-93617.5In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informaCVE-2018-93627.5In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lCVE-2018-93638.4In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional executioCVE-2018-93647.5In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure booCVE-2018-93658.8In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This co