Description

In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation.

Remediation

References

CVE-2018-9481

Related Vulnerabilities

WordPress Plugin The Official Facebook Chat Cross-Site Request Forgery (1.2)

Oracle Database Server CVE-2011-0792 Vulnerability (CVE-2011-0792)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2023-39456)

Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2011-0698)

WordPress Plugin Store Locator Plus for WordPress Privilege Escalation (5.5.14)

Severity

Medium

Classification

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-190 CVE-2018-9481