CVE-2018-9491

CVE-2018-9491 affects Android’s media framework: in NdkMediaCodec.cpp, AMediaCodecCryptoInfo_new may trigger an out-of-bounds write caused by an integer overflow. This could allow remote code execution in external apps with no extra privileges, with user interaction required for exploitation. Aff...