CVE-2018-9354 in Android

Riassunto

di MITRE • 28/11/2024

In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Google Android
• Prenotare: 05/04/2018
• Divulgazione: 28/11/2024
• Moderazione: accettato
• Voce: VDB-286324
• CPE: pronto
• CWE: CWE-404 (confermato)
• CVSS: 6.5 (NVD)
• EPSS: 0.00296
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-9354
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-9354
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-9354/