CVE-2018-9453

CVE-2018-9453 describes a local information-disclosure vulnerability in Android where, in avdt_msg_prs_cfg of avdt_msg.cc, a missing bounds check allows an out-of-bounds read. Affects Android versions 6.0–8.1 (including 6.0.0/6.0.1, 7.0, 7.1.x, 8.0, 8.1). The underlying issue is a missing bounds ...