In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.
References
| Link | Resource |
|---|---|
| https://source.android.com/security/bulletin/2018-09-01 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jun 2026, 02:06
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) En xmlMemStrdupLoc de xmlmemory.c, existe una posible escritura fuera de límites debido a un desbordamiento de entero. Esto podría conducir a la ejecución remota de código en un proceso sin privilegios sin necesidad de privilegios de ejecución adicionales. Se requiere interacción del usuario para la explotación. |
18 Dec 2024, 15:26
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:* cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:* |
|
| Summary |
|
|
| References | () https://source.android.com/security/bulletin/2018-09-01 - Patch, Vendor Advisory | |
| First Time |
Google
Google android |
20 Nov 2024, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-190 |
20 Nov 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-20 18:15
Updated : 2026-06-17 02:06
NVD link : CVE-2018-9472
Mitre link : CVE-2018-9472
CVE.ORG link : CVE-2018-9472
JSON object : View
Products Affected
- android
CWE
CWE-190
Integer Overflow or Wraparound