In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
References
| Link | Resource |
|---|---|
| https://source.android.com/docs/security/bulletin/pixel/2018-08-01 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jun 2026, 02:06
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) En sdp_copy_raw_data de sdp_discovery.cc, existe una posible lectura fuera de límites debido a una comprobación de límites incorrecta. Esto podría llevar a una divulgación de información local sin necesidad de privilegios de ejecución adicionales. Se requiere interacción del usuario para su explotación. |
18 Dec 2024, 20:00
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:* cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:* |
|
| References | () https://source.android.com/docs/security/bulletin/pixel/2018-08-01 - Patch, Vendor Advisory | |
| First Time |
Google
Google android |
03 Dec 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-125 |
03 Dec 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-03 01:15
Updated : 2026-06-17 02:06
NVD link : CVE-2018-9441
Mitre link : CVE-2018-9441
CVE.ORG link : CVE-2018-9441
JSON object : View
Products Affected
- android
CWE
CWE-125
Out-of-bounds Read