CVE-2018-9428

CVE-2018-9428 : The issue affects Android’s AAudio service (AAudioServiceStreamBase.cpp, startDevice) and is caused by an out-of-bounds write stemming from a use-after-free. This can lead to local arbitrary code execution with high impact (confidentiality, integrity, and availability) as describe...

CVE-2018-9424

CVE-2018-9424 concerns an out-of-bounds write in CryptoPlugin::decrypt (CryptoPlugin.cpp) that could allow local escalation of privilege with no user interaction. Exploitation details are not provided in the documents; the Android Security Bulletin catalogs this CVE under Media framework issues w...

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9420

CVE-2018-9420 affects Android’s BnCameraService::onTransact in CameraService.cpp, enabling information disclosure via uninitialized data with local access and no user interaction. The issue is categorized as an Information Disclosure (ID) in the Android 2018-07-01/2018-07-05 patch-level bulletin,...

CVE-2018-9419

In l2cbleprocesssigcmd of l2cble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9419

In l2cbleprocesssigcmd of l2cble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9417

The CVE-2018-9417 entry affects the Linux kernel USB HID gadget driver (f_hid.c). In functions f_hidg_read and hidg_disable, there is a use-after-free caused by improper locking, enabling local escalation of privilege with no user interaction required. The description states the impact as local p...

CVE-2018-9410

CVE-2018-9410 describes an out-of-bounds read in the Android Framework via FontUtils.cpp -> analyzeAxes, causing local information disclosure with no extra privileges and no user interaction. The connected Android bulletin lists CVE-2018-9410 under the Framework section with High severity, not...

CVE-2018-9339

creationtimestamp| type| source ---|---|--- 2024-11-19 21:00:59+00:00| seen| https://t.me/cvedetector/11510...

CVE-2018-9345

creationtimestamp| type| source ---|---|--- 2024-11-19 21:00:57+00:00| seen| https://t.me/cvedetector/11509...

CVE-2018-9344

creationtimestamp| type| source ---|---|--- 2024-11-19 21:00:56+00:00| seen| https://t.me/cvedetector/11508...

CVE-2018-9341

creationtimestamp| type| source ---|---|--- 2024-11-19 21:00:54+00:00| seen| https://t.me/cvedetector/11507...

CVE-2018-9340

creationtimestamp| type| source ---|---|--- 2024-11-19 21:00:53+00:00| seen| https://t.me/cvedetector/11506...

CVE-2018-9346

creationtimestamp| type| source ---|---|--- 2024-11-19 21:00:52+00:00| seen| https://t.me/cvedetector/11505...

CVE-2018-9365

In smpdatareceived of smpl2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2018-9365

CVE-2018-9365 describes a potential out-of-bounds read in the SMP L2C data path (smp_data_received in smp_l2c.cc) that could lead to remote code execution. Exploitation requires user interaction. Multiple connected sources (RH, NVD, CVE lists, Android bulletin) confirm the issue and its remote-co...

CVE-2018-9364

In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction is not needed for exploitation...

CVE-2018-9369

In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2018-9368

In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9371

CVE-2018-9371 affects the Mediatek Preloader/bootloader. It describes out-of-bounds reads/writes via an exposed interface that permits arbitrary peripheral memory mapping due to insufficient blacklisting/whitelisting. Under the described conditions, this can enable local elevation of privilege wi...