CVE-2018-9466

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 19, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-94679.8In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect secuCVE-2018-94687.1In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This could lead to local inCVE-2018-94697.8In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing permission check. This coCVE-2018-94708.8In bff_Scanner_addOutPos of Scanner.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote eCVE-2018-94717.8In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local eCVE-2018-94728.8In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code executCVE-2018-94737.8In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead tCVE-2018-94747.8In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input validation. This coulCVE-2018-94758.8In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could leaCVE-2018-94769.8In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalatiCVE-2018-94777.8In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This coCVE-2018-94789.8In process_service_attr_req and process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds ch
CVE-2018-9466: High severity, CVSS 8.8 | Vulnix