New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2018-9507

NVDCIRCLENISA

EUVD-2018-21101 · Published Oct 2, 2018

In bta_av_proc_meta_cmd of bta_av_act.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111893951

Technologies

Google Android

Weaknesses

CWE-125

CVSS scores

  • v3.06.5CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
  • v2.06.1AV:A/AC:L/Au:N/C:C/I:N/A:N

References

Potentially impacted assets

See if this affects your attack surface

News

Our latest news

Couldn’t load the latest news.

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot