In pppol2tp_connect, there is possible memory corruption due to a use after free.

Published 7 y ago 2018-12-07 · modified 4 mo ago 2026-06-17 · JSON

CVSS

6.7

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.4%

percentile 39%

Public exploits

none known

In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.

Exploit prediction (EPSS)

0.44% probability of exploitation in the next 30 days, higher than 39% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	6.7	`CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	7.2	`AV:L/AC:L/Au:N/C:C/I:C/A:C`

Affected products

Google Inc. Android

Classification

Weakness

CWE-416 Use After Free

References

source.android.com /security/bulletin/pixel/2018-09-01 · x_refsource_CONFIRM, x_transferred
usn.ubuntu.com /3932-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
usn.ubuntu.com /3932-2/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
access.redhat.com /errata/RHSA-2019:2043 · vendor-advisory, x_refsource_REDHAT, x_transferred
access.redhat.com /errata/RHSA-2019:2029 · vendor-advisory, x_refsource_REDHAT, x_transferred

Sources

CVE List: CVE-2018-9517
NVD: CVE-2018-9517

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.