NetSight
medium5.5

CVE-2018-9340

In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information di…

Impact

In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information disclosure.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0

Weakness classification

References