How severe is CVE-2018-9566?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.7 out of 10.

What type of vulnerability is CVE-2018-9566?

This is classified as CWE-125, which is a common weakness in software security.

CVE-2018-9566 - MEDIUM Severity | CVSS 5.7

Vulnerability Description

In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure when connecting to a malicious Bluetooth device with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-74249842.

Related Vulnerabilities

CVE-2017-13317

MEDIUM

CVSS:5.7(Medium)

In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional exe...

CWE-1252017

CVE-2017-13318

MEDIUM

CVSS:5.7(Medium)

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privi...

CWE-1252017

CVE-2018-11293

MEDIUM

CVSS:5.7(Medium)

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler, ndp_cfg len and num_n...

CWE-1252018

CVE-2021-38451

MEDIUM

CVSS:5.7(Medium)

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value ...

CWE-1252021

CVE-2022-39316

MEDIUM

CVSS:5.7(Medium)

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based cli...

CWE-1252022

CVE-2022-47363

MEDIUM

CVSS:5.7(Medium)

In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service in wlan services.

CWE-1252022