Possible Out-of-Bounds Write in xmlMemStrdupLoc Could Lead to Remote Code Execution
CVE-2018-9472

8.8HIGH

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
20 November 2024

What is CVE-2018-9472?

An out-of-bounds write vulnerability in the xmlMemStrdupLoc function in xmlmemory.c results from an integer overflow, which may allow for remote code execution. This vulnerability necessitates user interaction for exploitation, meaning that an attacker must convince a user to perform a specific action. The implications of this vulnerability include the potential for unauthorized access and manipulation of an unprivileged process, emphasizing the need for prompt security updates to affected Android versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Android 7

Android 8

Android 8.1

References

https://source.android.com/security/bulletin/2018-09-01

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.