← Voltar para CVEs
CVE-2018-9476
N/ADescricao
In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-109699112
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado10/2/2018
Ultima modificacao11/21/2024
Fontenvd
Avistamentos honeypot0
Produtos afetados
google:android
Fraquezas (CWE)
CWE-416
Referencias
http://www.securityfocus.com/bid/105482(security@android.com)
https://android.googlesource.com/platform/system/bt/+/dd28d8ddf2985d654781770c691c60b45d7f32b4(security@android.com)
https://source.android.com/security/bulletin/2018-10-01%2C(security@android.com)
http://www.securityfocus.com/bid/105482(af854a3a-2127-422b-91ae-364da2661108)
https://android.googlesource.com/platform/system/bt/+/dd28d8ddf2985d654781770c691c60b45d7f32b4(af854a3a-2127-422b-91ae-364da2661108)
https://source.android.com/security/bulletin/2018-10-01%2C(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.