CVE-2018-9363

State: PUBLISHED · Published: 2018-11-06 · Updated: 2024-09-16 · Assigner: google_android

Description

In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.

CWE

(none)

Affected

Google Inc. / Android — v=Android kernel [affected]

CVSS

(none)

References

https://usn.ubuntu.com/3797-2/ vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3797-1/ vendor-advisory, x_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html mailing-list, x_refsource_MLIST
https://usn.ubuntu.com/3820-1/ vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3820-2/ vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2948 vendor-advisory, x_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4308 vendor-advisory, x_refsource_DEBIAN
https://source.android.com/security/bulletin/2018-06-01 x_refsource_CONFIRM
https://usn.ubuntu.com/3822-2/ vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3822-1/ vendor-advisory, x_refsource_UBUNTU
https://usn.ubuntu.com/3820-3/ vendor-advisory, x_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:2043 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029 vendor-advisory, x_refsource_REDHAT

Source

cvelistV5-main/cves/2018/9xxx/CVE-2018-9363.json