CVE-2018-9569 is an out-of-bounds write vulnerability in Android 9, specifically within the impd_init_drc_decode_post_config function, affecting the impd_drc_gain_decoder.c component. This flaw, stemming from incorrect bounds checking, could enable remote code execution without requiring elevated privileges, though user interaction is necessary for successful exploitation. Rated 8.8 HIGH on the CVSS scale, this vulnerability presents a significant risk due to its network-based attack vector and high impact on confidentiality, integrity, and availability. Despite the high severity, the attack complexity is low. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The vulnerability has garnered minimal community discussion and media coverage, suggesting a low level of public awareness or attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
9.0CPE matchmatch criteria | cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.