CVE-2018-9521

CVE-2018-9521 describes an out-of-bounds write in NuPlayer2CCDecoder.cpp (parseMPEGCCData) on Android 9, enabling remote code execution in an unprivileged process with user interaction. The issue arises from an incorrect bounds check in the Media framework’s MPEG data handling, potentially allowi...