Remote Code Execution Vulnerability in Builtins' ArrayConcatVisitor

CVE-2018-9433

Currently unrated 🤨

Key Information

Vendor: Google
Status: Android
Vendor: CVE Published:; 19 November 2024

Summary

In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Version(s)

Android = 6

Android = 6.0.1

Android = 7

Timeline

Vulnerability published.
Nov 19, 2024
Vulnerability Reserved.
Apr 5, 2018

Collectors

NVD DatabaseMitre Database