vulnwire
7.8high

CVE-2018-9490

In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.4%
percentile 73%
Public exploits
0
none known

In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111274046

Exploit prediction (EPSS)

1.44% probability of exploitation in the next 30 days, higher than 73% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.07.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

  • Google Inc. Android

Classification

Weakness
  • CWE-704 Incorrect Type Conversion or Cast

References

  • android.googlesource.com /platform/external/chromium-libpac/+/948d4753664cc4e6b33cc3de634ac8fd5f781382%2C · x_refsource_MISC, x_transferred
  • source.android.com /security/bulletin/2018-10-01%2C · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/105484 · vdb-entry, x_refsource_BID, x_transferred
  • android.googlesource.com /platform/external/v8/+/a24543157ae2cdd25da43e20f4e48a07481e6ceb · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.