CVE-2018-9440
At a glance Severity MEDIUM 6.5 EPSS EPSS 0.18 % · percentile 8 (2026-10-27) State PUBLISHED Published 2024-11-19 Updated 2024-11-20 Assigner google_android NVD status Analyzed Description In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CISA-ADP CVSS 3.1 MEDIUM 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 3.1 MEDIUM 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*Affected products Product Versions Google · Android affected 7 ; affected 8 ; affected 8.1 ; affected 9 ; affected nyc-mr1-dev ; affected nyc-mr2-dev
References
Sources
