Skip to content
OpenAdvisories
Unscored CVE-2018-9594 EUVD-2018-21188GHSA-gf43-558g-52h4

In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a …

Published Feb 12, 2019 · Updated Sep 16, 2024 · Assigned by google_android

Description

In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116791157.

Affected products

VendorProductAffectedFixed
*** n/a *** Android Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 —

References