CVEvulnerability
CVE-2018-9476
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-10-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-416
Description
In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-109699112
Affected configurations
• google android 8.0
• google android 8.1
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- http://www.securityfocus.com/bid/105482 Third Party Advisory, VDB Entry
- https://android.googlesource.com/platform/system/bt/+/dd28d8ddf2985d654781770c691c60b45d7f32b4 Patch, Third Party Advisory
- https://source.android.com/security/bulletin/2018-10-01%2C source.android.com
- http://www.securityfocus.com/bid/105482 Third Party Advisory, VDB Entry
- https://android.googlesource.com/platform/system/bt/+/dd28d8ddf2985d654781770c691c60b45d7f32b4 Patch, Third Party Advisory
- https://source.android.com/security/bulletin/2018-10-01%2C source.android.com