Possible Out-of-Bounds Write in ClearKeyCasPlugin.cpp Could Lead to Remote Arbitrary Code Execution
CVE-2018-9411
Currently unrated 🤨
Summary
In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Version(s)
Android = 8
Android = 8.1
Android = 9
Timeline
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database