CVE-2018-9489

When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information

published November 6, 2018

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This could lead to information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-77286245.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00995 · 62.1th percentile
Published
2018-11-06T17:00Z
EPSS history
Timeline
  • 06 NOV 17:00Z
    When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information
    cvelistv5