Skip to content
OpenAdvisories
Unscored CVE-2018-9489 EUVD-2018-21083GHSA-82jx-f3w3-hw7f

When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi netwo…

Published Nov 6, 2018 · Updated Sep 16, 2024 · Assigned by google_android

Description

When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This could lead to information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-77286245.

Affected products

VendorProductAffectedFixed
Google Android Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 —

References