Back to Database
Status published
High
CVE-2018-9565
In readBytes of xltdecwbxml.c, there is a possible out of...
Vulnerability Description
In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-16680558.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-9565
Credits & Attribution
No credits recorded in the NVD database.
References
More from Google Inc.
View All →CVE-2018-9580
A Elevation of privilege vulnerability in the HTC bootloader. Product:...
Critical
9.8
CVE-2018-9578
In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of...
Critical
9.8
CVE-2018-9577
In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of...
High
7.8
CVE-2018-9576
In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of...
High
7.8
CVE-2018-9575
In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of...
High
7.8
Affected Vendor
Google Inc.
View all reports →Affected Software
Android
Vulnerable Versions:
Android-16680558
Timeline
Official Publish:
December 6th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.