ISOMAN

CVE

CVE-2018-9363

In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.

Severity
HIGH
CVSS
8.4
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. https://access.redhat.com/errata/RHSA-2018:2948
  2. https://access.redhat.com/errata/RHSA-2019:2029
  3. https://access.redhat.com/errata/RHSA-2019:2043
  4. https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html
  5. https://source.android.com/security/bulletin/2018-06-01
  6. https://usn.ubuntu.com/3797-1/
  7. https://usn.ubuntu.com/3797-2/
  8. https://usn.ubuntu.com/3820-1/
  9. https://usn.ubuntu.com/3820-2/
  10. https://usn.ubuntu.com/3820-3/
  11. https://usn.ubuntu.com/3822-1/
  12. https://usn.ubuntu.com/3822-2/
  13. https://www.debian.org/security/2018/dsa-4308
  14. https://access.redhat.com/errata/RHSA-2018:2948
  15. https://access.redhat.com/errata/RHSA-2019:2029
  16. https://access.redhat.com/errata/RHSA-2019:2043
  17. https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html
  18. https://source.android.com/security/bulletin/2018-06-01
  19. https://usn.ubuntu.com/3797-1/
  20. https://usn.ubuntu.com/3797-2/