CVE-2018-9352

Description

In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

PUBLISHED Reserved 2018-04-05 | Published 2024-11-27 | Updated 2024-11-29 | Assigner google_android

Product status

References

source.android.com/docs/security/bulletin/pixel/2018-06-01

cve.org (CVE-2018-9352)

nvd.nist.gov (CVE-2018-9352)

Download JSON