CVE Database
/

CVE-2018-9518

Back to search

CVE-2018-9518

Published: Dec 7, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-73083945.

VendorProductVersions

Google Inc.

Android

affected
Android Kernel

References

USN-3798-1
vendor-advisory
x_refsource_UBUNTU
USN-3798-2
vendor-advisory
x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now