CVE-2018-9428

Impact

In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. https://source.android.com/security/bulletin/2018-07-01

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://source.android.com/security/bulletin/2018-07-01