CVE-2018-9547

State: PUBLISHED · Published: 2018-12-06 · Updated: 2024-08-05 · Assigner: google_android

Description

In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.1 Android-9. Android ID: A-114223584.

CWE

(none)

Affected

Google Inc. / Android — v=Android-8.1 Android-9 [affected]

CVSS

(none)

References

http://www.securityfocus.com/bid/106067 vdb-entry, x_refsource_BID
https://source.android.com/security/bulletin/2018-12-01 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2018/9xxx/CVE-2018-9547.json