CVE-2018-9340

Summary

CVE-2018-9340 is a vulnerability affecting the ResourceTypes.cpp file in ResStringPool::setTo function. An attacker can manipulate the value of mStringPoolSize, leading to out-of-bounds behavior and disclosing sensitive information. This issue poses a potential risk for information leakage. The vulnerability is located in the handling of string pool sizes and could be exploited through a crafted input. It is recommended that affected systems be updated to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.