CVE-2018-9358

In gattsprocessattributereq of gattsc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. Produc...

PT-2018-18997

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.1 Description The issue is related to a missing bounds check in the gatts process attribute req function of gatt sc.cc, which could lead to a read of uninitialized data. This might result in remote information...