PT-2018-19014

CVE-2018-9453

·

Published

2018-11-06

·

Updated

2018-12-13

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.1
Description The issue is related to a missing bounds check in the avdt msg prs cfg function of avdt msg.cc, which could lead to a local information disclosure. This can occur without any additional execution privileges and does not require user interaction for exploitation.
Recommendations For Android versions 6.0 through 8.1, update to a version that includes the fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾