In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation.
References
| Link | Resource |
|---|---|
| https://source.android.com/security/bulletin/2018-09-01 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jun 2026, 02:06
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) En la función getHost() de UriTest.java, existe la posibilidad de una determinación incorrecta del origen web. Esto podría llevar a decisiones de seguridad incorrectas sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la explotación. |
22 Nov 2024, 21:27
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:* |
|
| References | () https://source.android.com/security/bulletin/2018-09-01 - Vendor Advisory | |
| First Time |
Google
Google android |
|
| CWE | NVD-CWE-noinfo |
21 Nov 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-276 | |
| Summary |
|
20 Nov 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-20 00:15
Updated : 2026-06-17 02:06
NVD link : CVE-2018-9467
Mitre link : CVE-2018-9467
CVE.ORG link : CVE-2018-9467
JSON object : View
Products Affected
- android
CWE