CVE-2018-9360

In processl2capcmd of l2cmain.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0...

CVE-2018-9360

CVE-2018-9360 affects Android 6.0–8.1. The issue occurs in Bluetooth’s L2CAP handling: process_l2cap_cmd in l2c_main.cc can read out of bounds due to a missing bounds check. This enables remote information disclosure over the network without user interaction. Exploitation details are not provided...