CVE-2018-9450

In avrcprocvendorcommand of avrcapi.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0...

PT-2018-19012

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.1 Description The issue is related to a missing bounds check in the avrc proc vendor command function of avrc api.cc, which could lead to a possible out of bounds write. This might result in remote code execution...