Possible Information Disclosure in BnCameraService::onTransact
CVE-2018-9420

5.5MEDIUM

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
19 November 2024

What is CVE-2018-9420?

The Camera Service in Android contains a vulnerability that arises from uninitialized data within the BnCameraService::onTransact function. This flaw can result in local information disclosure, potentially exposing sensitive information without the need for any additional execution privileges or user interaction. The threat primarily affects user privacy, making it crucial for users to ensure their devices are updated to the latest security patches to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Android 6

Android 6.0.1

Android 7

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.