CVE-2018-9510

CVE-2018-9510 describes a Bluetooth information-disclosure risk in Android. The root cause is a missing bounds check in smp_proc_enc_info (smp_act.cc), leading to an out-of-bounds read. Impact is remote information disclosure over Bluetooth without special privileges or user interaction, affected...