CVE-2018-9490

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9.0

Description The issue is related to a type confusion in the CollectValuesOrEntriesImpl function of elements.cc, which could lead to remote code execution and escalation of privilege. This requires user interaction for exploitation. The vulnerability may allow a remote attacker to elevate their privileges using a specially crafted file.

Recommendations For Android versions 7.0 through 9.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.