CVE-2018-9499

CVE-2018-9499 affects Android Media framework, stemming from an invalid read in readVector() in iCrypto.cpp (uninitialized data) that could disclose local DRM-server information. Exploitation requires local access and does not require user interaction. Affected Android versions span 7.0–9.0 (Andr...