CVE-2018-9360

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74201143.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/104461Third Party Advisory, VDB Entry
https://source.android.com/security/bulletin/2018-06-01Patch, Vendor Advisory
http://www.securityfocus.com/bid/104461Third Party Advisory, VDB Entry
https://source.android.com/security/bulletin/2018-06-01Patch, Vendor Advisory

Timeline

Published: Nov 6, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-93617.5In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa CVE-2018-93627.5In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could l CVE-2018-93638.4In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional executio CVE-2018-93647.5In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boo CVE-2018-93658.8In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This co CVE-2018-93667.8In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer ove CVE-2018-93677.8In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. T CVE-2018-93687.8In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This cou CVE-2018-93697.3In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privil CVE-2018-93707.3In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing boun CVE-2018-93716.4In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapp CVE-2018-93727.8In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a lo