Possible Use After Free Vulnerability in DescramblerImpl.cpp Could Lead to Local Escalation of Privilege

CVE-2018-9344

Currently unrated 🤨

Key Information

Vendor: Google
Status: Android
Vendor: CVE Published:; 19 November 2024

Summary

In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Version(s)

Android = 8.1

Timeline

Vulnerability published.
Nov 19, 2024
Vulnerability Reserved.
Apr 5, 2018

Collectors

NVD DatabaseMitre Database