CVE-2018-9483
En bref Sévérité MEDIUM 6.5 EPSS EPSS 0.15 % · centile 4 (2026-10-27) État PUBLISHED Publiée 2024-11-20 Mise à jour 2024-11-20 Attribuée par google_android Statut NVD Analyzed Description In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.
Scores Version Score Vecteur Évalué par CVSS 3.1 MEDIUM 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CISA-ADP CVSS 3.1 MEDIUM 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N NVD · nvd@nist.gov (Primary) CVSS 3.1 MEDIUM 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*Produits affectés Produit Versions Google · Android affected 7 ; affected 8 ; affected 8.1 ; affected 9 ; affected nyc-mr1-dev ; affected nyc-mr2-dev
Références
Sources
