CVE-2018-9537

In CAacDecoderDecodeFrame of aacdecode.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

CVE-2018-9531

The CVE-2018-9531 issue is in Android 9 (Media framework) within AudioSpecificConfig_Parse in tpdec_asc.cpp. It describes a possible out-of-bounds write due to a missing bounds check, enabling remote code execution with no extra privileges, with exploitation requiring user interaction. No exploit...

CVE-2018-9535

CVE-2018-9535 is a vulnerability in Android 9 where ixheaacd_reset_acelp_data_fix in ixheaacd_lpc.c can write out of bounds due to a missing bounds check, enabling remote code execution with network attack vector and user interaction required. The issue is documented in NVD for Android 9 and echo...

CVE-2018-9521

In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

CVE-2018-9533

CVE-2018-9533 affects Android 9 and is described as an out-of-bounds read/write in ixheaacd_dec_data_init (ixheaacd_create.c) that could enable remote code execution with no extra privileges; exploitation reportedly requires user interaction. The issue is documented in the Android 2018-11 securit...

CVE-2018-9530

In ixheaacdtnsarfilterdec of ixheaacdaactns.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android...

CVE-2018-9534

CVE-2018-9534: A out-of-bounds write in ixheaacd_mps_getstridemap (ixheaacd_mps_parse.c) on Android 9 can lead to remote code execution. Root cause: missing bounds check in ixheaacd_mps_getstridemap. Impact per sources: potential RCE with network vector; user interaction required for exploitation...

CVE-2018-9521

CVE-2018-9521 describes an out-of-bounds write in NuPlayer2CCDecoder.cpp (parseMPEGCCData) on Android 9, enabling remote code execution in an unprivileged process with user interaction. The issue arises from an incorrect bounds check in the Media framework’s MPEG data handling, potentially allowi...

CVE-2018-9535

In ixheaacdresetacelpdatafix of ixheaacdlpc.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android...

CVE-2018-9532

In ixheaacdextractframeinfold of ixheaacdenvextr.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9...

kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c

The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel doesn't properly validate the sigevent-sigevnotify field, which leads to out-of-bounds access in the showtimer function...

CVE-2018-9448

In avctbcbmsgind of avctbcbact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0...

Out-of-bounds

In gattsprocessattributereq of gattsc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. Produc...

Out-of-bounds

In avdtmsgprscfg of avdtmsg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0...

Out-of-bounds

In avctbcbmsgind of avctbcbact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0...

Out-of-bounds

In sdpuextractattrseq of sdputils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0...

CVE-2018-9385

In driveroverridestore of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android I...

CVE-2018-9437

In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0...

Out-of-bounds

In BNEPWrite of bnepapi.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1...

CVE-2018-9355

In btadmsdpresult of btadmact.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0...