Out-of-Bounds Information Disclosure Vulnerability in ResStringPool::setTo

CVE-2018-9340
Currently unrated 🤨

Key Information

Vendor
Google
Status
Android
Vendor
CVE Published:
19 November 2024

Summary

In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information disclosure.

Affected Version(s)

Android = 6

Android = 6.0.1

Android = 7

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.