Possible Out of Bounds Write in ResStringPool::setTo Could Lead to Local Escalation of Privilege
CVE-2018-9338
Currently unrated 🤨
Summary
In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Version(s)
Android = 6
Android = 6.0.1
Android = 7
Timeline
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database