8.4high
CVE-2018-9474
In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input validation.
Published 23 mo ago · modified 4 mo ago · JSON
CVSS
8.4
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
0.1%
percentile 0%
Public exploits
0
none known
Summary
In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CISA SSVC assessment
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 23 mo ago
Exploit prediction (EPSS)
0.09% probability of exploitation in the next 30 days, higher than 0% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 8.4 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 8.4 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Google Android
Classification
- Weakness
- CWE-502 Deserialization of Untrusted Data
References
- source.android.com /security/bulletin/2018-09-01
Sources
- CVE List: CVE-2018-9474
- NVD: CVE-2018-9474
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.