CVE-2018-9435

Summary

CVE-2018-9435 is a vulnerability affecting the BlueZ Bluetooth software. In the file gatt_cl.cc, there is a missed bounds check in the function gatt_process_error_rsp. This oversight could result in out-of-bound read access, granting an attacker local information disclosure capabilities without requiring additional execution privileges. User interaction is not necessary for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.