CVE-2018-9357

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74947856.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Nov 6, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-93587.5In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead CVE-2018-93597.5In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa CVE-2018-93607.5In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa CVE-2018-93617.5In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa CVE-2018-93627.5In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could l CVE-2018-93638.4In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional executio CVE-2018-93647.5In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boo CVE-2018-93658.8In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This co CVE-2018-93667.8In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer ove CVE-2018-93677.8In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. T CVE-2018-93687.8In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This cou CVE-2018-93697.3In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privil