CVE-2018-9357

Description

In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74947856.

Scores

Faiblesses (CWE)

• CWE-787

Références européennes

• ENISA EUVD · EUVD-2018-20951
• GCVE · GCVE-0-2018-9357

Avis du CERT-FR

• CERTFR-2018-AVI-267 — Multiples vulnérabilités dans Google Android · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

• cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*

Produits affectés

Références

• https://source.android.com/security/bulletin/2018-06-01
• http://www.securityfocus.com/bid/104461

Sources