CVE-2018-9566 - CVE House

Back to Database

Status published Medium CVE-2018-9566

In process_service_search_rsp of sdp_discovery.c, there is a possible out of...

5.7 CVSS

Vulnerability Description

In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure when connecting to a malicious Bluetooth device with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-74249842.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-9566

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Google Inc.

View All →

A Elevation of privilege vulnerability in the HTC bootloader. Product:...

In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of...

In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of...

In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of...

In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of...

Affected Vendor

Google Inc.

View all reports →

Affected Software

Android

Vulnerable Versions:

Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9

Timeline

Official Publish: December 6th, 2018

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.