High · 8.0 CVE-2018-9413 EUVD-2018-21007GHSA-cmfx-pwgh-63xj

In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to re…

Published Dec 2, 2024 · Updated Dec 3, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	7, 7.1.1, 7.1.2, 8, 8.1	—

Advisories 1

WID-SEC-2026-4000 Google Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 15, 2026

References

https://source.android.com/docs/security/bulletin/pixel/2018-07-01

EUVD	v3.1	8.0
CISA-ADP	v3.1	8.0