Beveiligingsadvies

CVE-2018-9475

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-20 17:27:37

Laatst bijgewerkt 2024-11-20 18:28:21

Toegewezen door google_android

CVSS-score 7.5

Status PUBLISHED

Beschrijving

In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalation of privilege via Bluetooth, if the recipient has enabled SIP calls with no additional execution privileges needed. User interaction is not needed for exploitation.

← Alle CVE's bekijken Bekijk op cve.org ↗