CVE-2018-9504 - CVE House
Back to Database
Status published High CVE-2018-9504

In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of...

Vulnerability Description

In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-110216176

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-9504

Credits & Attribution

No credits recorded in the NVD database.

References

More from Google Inc.

View All →
CVE-2018-9580
A Elevation of privilege vulnerability in the HTC bootloader. Product:...
Critical 9.8
CVE-2018-9578
In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of...
Critical 9.8
CVE-2018-9577
In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of...
High 7.8
CVE-2018-9576
In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of...
High 7.8
CVE-2018-9575
In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of...
High 7.8

Affected Vendor

Google Inc.

View all reports →

Affected Software

Android
Vulnerable Versions:
Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0

Timeline

Official Publish: October 2nd, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.