Possible Out of Bounds Read Vulnerability in Sdp_utils
CVE-2018-9456

7.5HIGH

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
19 November 2024

What is CVE-2018-9456?

A vulnerability within the Android operating system has been identified in the sdpu_extract_attr_seq function of sdp_utils.cc. This flaw allows for a potential out of bounds read, which could result in a remote denial of service scenario. The vulnerability does not require any additional execution privileges to exploit, nor does it necessitate user interaction, making it a significant concern for system security. Organizations utilizing affected versions of Android should take precautionary measures to mitigate potential risks associated with this vulnerability, as it could expose devices to unintentional service disruptions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Android 7

Android 8

Android 8.1

References

https://source.android.com/security/bulletin/2018-09-01

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.