Description
In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Product status
6
6.0.1
7
nyc-mr1-dev
nyc-mr2-dev
References
source.android.com/security/bulletin/2018-07-01
