Description

In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

INFO

Published Date :

2024-12-02T21:09:16.394Z

Last Modified :

2024-12-03T17:26:05.941Z

Source :

google_android
AFFECTED PRODUCTS

The following products are affected by CVE-2018-9414 vulnerability.

Vendors Products
Google
  • Android
  • Pixel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2018-9414.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact