VDB
CVE-2018-9456
CVE-2018-9456
PUBLISHED
CVSS 7.5 HIGH
In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
EPSS 4.23% · 89.0th percentile
Risk Scores
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
4.23%
89.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 7.1.2, 7.0, 7.1.1 | |
| Android | nyc-mr2-dev, 7, 8 | |
| android | 7, nyc-mr2-dev, nyc-mr1-dev |
Exploit Intelligence
Timeline
- Sep 5, 2018 CVE Published
- Nov 20, 2024 EPSS Score
- Dec 8, 2024 EPSS Score
- Dec 26, 2024 EPSS Score
- Jan 12, 2025 EPSS Score
- Jan 30, 2025 EPSS Score
- Mar 6, 2025 EPSS Score
- Mar 23, 2025 EPSS Score
- Apr 10, 2025 EPSS Score
- Apr 27, 2025 EPSS Score
- May 15, 2025 EPSS Score
- Jun 1, 2025 EPSS Score