UBUNTU-CVE-2018-9518
In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-73083945.
02 / AFFECTED SOFTWARE
Affected packages
139 explicit affected versions
14 explicit affected versions
54 explicit affected versions
76 explicit affected versions
35 explicit affected versions
21 explicit affected versions
19 explicit affected versions
39 explicit affected versions
15 explicit affected versions
49 explicit affected versions
46 explicit affected versions
17 explicit affected versions
12 explicit affected versions
12 explicit affected versions
11 explicit affected versions
12 explicit affected versions
9 explicit affected versions
13 explicit affected versions
26 explicit affected versions
51 explicit affected versions
6 explicit affected versions
12 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
1 explicit affected versions
3 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-73083945.
05 / REFERENCES