CVE-2018-9536

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112662184

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-95378.8In CAacDecoder_DecodeFrame of aacdecode.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remotCVE-2018-95387.8In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bounds read of a function CVE-2018-95397.0In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local escalation of privilegCVE-2018-95407.5In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remCVE-2018-95417.5In avrc_pars_vendor_rsp of avcr_pars_ct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote CVE-2018-95427.5In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote CVE-2018-95435.5In trim_device of f2fs_format_utils.c, it is possible that the data partition is not wiped during a factory reset. This could lead to local CVE-2018-95445.5In register_app of btif_hd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information diCVE-2018-95457.8In BTA_HdRegisterApp of bta_hd_api.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalaCVE-2018-95477.8In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation ofCVE-2018-95485.5In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. This could lead to locCVE-2018-95497.8In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead to remote code executi
CVE-2018-9536: High severity, CVSS 7.8 | Vulnix