CVE-2018-9428
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Nov 19, 2024
Updated: Nov 22, 2024
CWE ID 787
CWE ID 416
Summary
CVE-2018-9428 is a vulnerability affecting the Android operating system. In the file AAudioServiceStreamBase.cpp, there is a use-after-free condition in the 'startDevice' function. This issue results in a possible out-of-bounds write, which could be exploited to execute arbitrary code locally. No additional privileges are required for the exploitation, but user interaction is necessary to trigger the vulnerability. This vulnerability was disclosed in the July 2018 Android Security Bulletin.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android