Skip to content
OpenAdvisories
Unscored CVE-2018-9536 EUVD-2018-21130GHSA-xjg9-9f7c-cx46

In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code exe…

Published Nov 14, 2018 · Updated Aug 5, 2024 · Assigned by google_android

Description

In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112662184

Affected products

VendorProductAffectedFixed
Google Android Android-9 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 fdkaac No fix yet —
Ubuntu 26.04 LTS fdkaac No fix yet —
Ubuntu 25.10 fdkaac No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS fdkaac No fix yet —
Ubuntu Pro 22.04 LTS fdkaac No fix yet —
Ubuntu Pro 20.04 LTS fdkaac No fix yet —
Ubuntu Pro 18.04 LTS fdkaac No fix yet —
Ubuntu Pro 16.04 LTS fdkaac No fix yet —

References