CVE-2018-9557

Опубликовано: 06 дек. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2. Android ID: A-35385357.

Ссылки

http://www.securityfocus.com/bid/106147
Third Party Advisory
VDB Entry
https://source.android.com/security/bulletin/2018-12-01
Vendor Advisory
http://www.securityfocus.com/bid/106147
Third Party Advisory
VDB Entry
https://source.android.com/security/bulletin/2018-12-01
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*

cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*

cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.00019

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-763

Связанные уязвимости

GHSA-jv28-6qfj-ffqx