Skip to content
OpenAdvisories
Medium · 5.5 CVE-2018-9412 EUVD-2018-21006GHSA-27r4-945x-jq67

In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial o…

Published Nov 19, 2024 · Updated Mar 19, 2025 · Assigned by google_android

Description

In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 6, 6.0.1, 7, 8, 8.1, nyc-mr1-dev, nyc-mr2-dev —

Advisories 1

References