CVEvulnerability

CVE-2018-9363

8.4 HIGH Published 2018-11-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-11-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-190, CWE-787

Description

In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.

Affected configurations

• google android • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • debian debian linux 8.0 • debian debian linux 9.0 • linux linux kernel (>= 3.14 < 3.16.58) • linux linux kernel (>= 3.17 < 3.18.119) • linux linux kernel (>= 3.19 < 4.4.149) • linux linux kernel (>= 4.5 < 4.9.121) • linux linux kernel (>= 4.10 < 4.14.64) • linux linux kernel (>= 4.15 < 4.17.16) • linux linux kernel (>= 4.18 < 4.18.2)

Related

Weakness · CWE (2)

  • CWE-190 Integer Overflow or Wraparound weakness
  • CWE-787 Out-of-bounds Write weakness

References