CVE-2018-9351

EPSS 0.17%
Published 27.11.2024 23:15:04
Last modified 18.12.2024 19:45:45
Source security@android.com
Teams watchlist Login
Open Login

In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Google ≫ Android Version7.0

Google ≫ Android Version7.1.1

Google ≫ Android Version7.1.2

Google ≫ Android Version8.0

Google ≫ Android Version8.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.17%	0.389

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://source.android.com/docs/security/bulletin/pixel/2018-06-01

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-9351

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-9351

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-9351

EUVD