CVE-2018-9527

Name of the Vulnerable Software and Affected Versions Android versions Android-7.0 through Android-9

Description The issue is related to a possible out of bounds write in the vorbis book decodev set function of codebook.c due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed, requiring user interaction for exploitation.

Recommendations For Android versions Android-7.0 through Android-9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.