CVE-2018-9570 in Google Android
Summary
In impd_parse_drc_ext_v1 of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-115375616.
Reservation
04/05/2018
Disclosure
12/07/2018
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 127746 | Google Android impd_drc_dynamic_payload.c impd_parse_drc_ext_v1 out-of-bounds write | 787 | Not defined | Official fix | CVE-2018-9570 |