CVE-2018-9536

7.8 highEPSS 1.4%

In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112662184

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2018-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

http://www.securityfocus.com/bid/105865
https://source.android.com/security/bulletin/2018-11-01
http://www.securityfocus.com/bid/105865
https://source.android.com/security/bulletin/2018-11-01

Check your stack JSON