Medium · 6.2 CVE-2018-9378 EUVD-2018-20972GHSA-p59h-7g7v-xp8x

In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This …

Published Jan 28, 2025 · Updated Jan 28, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	Android Kernel	—

References

https://source.android.com/security/bulletin/pixel/2018-06-01