PT-2019-11169

CVE-2018-9591

·

Published

2019-02-11

·

Updated

2019-02-12

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9
Description: The issue is related to a possible out of bounds read due to a missing bounds check in the bta hh ctrl dat act function of bta hh act.cc. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not required for exploitation.
Recommendations: For Android versions 7.0 through 9, update to a version that includes the fix for the out of bounds read issue in bta hh ctrl dat act of bta hh act.cc.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾