CVE-2018-9444

Опубликовано: 06 нояб. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 7.1

EPSS Низкий

Описание

In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of service (remote hang or reboot) with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android ID: A-63521984.

Ссылки

http://www.securitytracker.com/id/1041432
Third Party Advisory
VDB Entry
https://source.android.com/security/bulletin/2018-08-01
Vendor Advisory
http://www.securitytracker.com/id/1041432
Third Party Advisory
VDB Entry
https://source.android.com/security/bulletin/2018-08-01
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*

cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*

cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*

cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*

cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00077

Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-835

Связанные уязвимости

GHSA-m35f-82qc-hmw7