CVE-2018-9365

HIGH

Google Android - Out-of-Bounds Read

Title source: rule

Description

In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.

Exploits (1)

github WORKING POC 8 stars

by codecat007 · cpoc

https://github.com/codecat007/cvehub/tree/main/android/Bluedroid/poc_CVE-2018-9365.c

View Code ZIP pw:eip

References (1)

[Patch, Vendor Advisory] https://source.android.com/security/bulletin/2018-07-01

Scores

CVSS v3 8.8

EPSS 0.0274

EPSS Percentile 85.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-125

Status published

Affected Products (7)

google/android

Timeline

Published Nov 19, 2024

Tracked Since Feb 18, 2026