High · 8.8 CVE-2018-9418 EUVD-2018-21012GHSA-6962-78fv-7v2v

In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to r…

Published Dec 2, 2024 · Updated Dec 3, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	7, 7.1.1, 7.1.2, 8, 8.1	—

Advisories 1

WID-SEC-2026-4000 Google Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 15, 2026

References

https://source.android.com/docs/security/bulletin/pixel/2018-07-01