CVE-2018-9347 in Android

Resumen (Inglés)

In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-68664359

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2018-04-05

Divulgación

2018-11-14

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
126869	Google Android eas_smf.c SMF_ParseMetaEvent escalada de privilegios	20	No está definido	Arreglo oficial	CVE-2018-9347

Fuentes

• MITRE
• NVD
• CVE Details