CVE-2018-9594

In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…

published February 12, 2019

CVSS
—
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116791157.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.7th percentile
Published
2019-02-12T00:00Z
EPSS history
Timeline
  • 12 FEB 00:00Z
    In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of…
    cvelistv5