CVEvulnerability

CVE-2018-9490

7.8 HIGH Published 2018-10-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-704

Description

In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111274046

Affected configurations

• google android 7.0 • google android 7.1.1 • google android 7.1.2 • google android 8.0 • google android 8.1 • google android 9.0

Related

Weakness · CWE (1)

  • CWE-704 Incorrect Type Conversion or Cast weakness

References