PT-2019-11157

CVE-2018-9563

·

Published

2019-06-19

·

Updated

2019-06-20

Description by

CVSS 2.0
7.1
High
MetricsAV:N/AC:M/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9
Description: The issue is related to a possible out-of-bound read in the llcp util parse cc function of llcp util.cc due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is necessary for exploitation.
Recommendations: For Android versions 7.0 through 9, update to a version that includes the fix for the out-of-bound read issue in llcp util parse cc.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾