CVE-2018-9475
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Nov 20, 2024
Updated: Nov 21, 2024
CWE ID 787
Summary
CVE-2018-9475 is a vulnerability affecting the HeadsetInterface component in btif\_hf.cc. The issue involves a missing stack check in the ClccResponse function, leading to a possible out-of-bounds write. An attacker can exploit this flaw via Bluetooth, potentially gaining remote privilege escalation. No user interaction is required, making the vulnerability particularly dangerous.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android