Possible Authentication Bypass in Settings App
CVE-2018-9477

7.8HIGH

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
20 November 2024

What is CVE-2018-9477?

In the Android operating system, the Settings app contains a vulnerability within the development options that allows an authentication bypass. This issue stems from a lack of a necessary permission check, potentially enabling local escalation of privileges. Exploitation of this vulnerability requires user interaction, making it imperative for users to be cautious when interacting with development options. Proper security measures and updates are essential to mitigate potential risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Android 8

Android 8.1

References

https://source.android.com/security/bulletin/2018-09-01

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.