CVE-2018-9432

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass. This could lead to local escalation of privilege due to hiding and bypassing the user's ability to disable access to contacts, with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published
Nov 19, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2018

CVE-2018-94338.8In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This could lead to remote cCVE-2018-94347.8In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalatiCVE-2018-94355.5In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local inforCVE-2018-94367.5In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informatioCVE-2018-94375.5In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service wiCVE-2018-94385.0When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a loCVE-2018-94396.7In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after-free due to improper locking. This could leadCVE-2018-94406.5In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service witCVE-2018-94415.5In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local CVE-2018-94445.5In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary CVE-2018-94456.8In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilCVE-2018-94469.8In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote
CVE-2018-9432: High severity, CVSS 7.8 | Vulnix