CVE-2018-9354 in Android

Sumário

de MITRE • 28/11/2024

In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: Google Android
• Reservar: 05/04/2018
• Divulgação: 28/11/2024
• Moderação: aceite
• Entrada: VDB-286324
• CPE: pronto
• CWE: CWE-404 (confirmado)
• CVSS: 6.5 (NVD)
• EPSS: 0.00296
• KEV: não
• Atividades: muito baixo
• Sector: Insurance, Police, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-9354
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-9354
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-9354/