CVE-2018-9583

CVE-2018-9583 describes a remote code execution risk in the Android Bluetooth server due to an out-of-bounds write in bta_ag_parse_cmer (bta_ag_cmd.cc) across Android 7.0–9.0. Exploitation requires no user interaction and can occur over the network. The issue is listed in the Android Security Bul...

CVE-2018-9583

In btaagparsecmer of btaagcmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution in the bluetooth server with no additional execution privileges...