In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112766520
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2018-11-01 | Vendor Advisory |
Configurations
Information
Published : 2018-11-14 10:29
Updated : 2018-12-14 06:30
NVD link : CVE-2018-9533
Mitre link : CVE-2018-9533
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
- android