CVE-2018-9590

CVE-2018-9590 affects Android 7.0–9, described as an out-of-bounds read in add_attr() within sdp_discovery.c. The issue could enable remote information disclosure without user interaction and with network access as the attack vector; no exploitation details are provided in the connected documents...

Out-of-bounds

In addattr of sdpdiscovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interactio...

CVE-2018-9566

CVE-2018-9566 affects Android devices via an out-of-bounds read in process_service_search_rsp located in sdp_discovery.c. The issue arises from a missing bounds check, enabling potential remote information disclosure when connected to a malicious Bluetooth device. Exploitation requires user inter...