CVE-2018-9438

Published: Nov 6, 2018Modified: Jun 17, 2026

5.0

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.3 / Impact: 3.6

Source: NVD

Description

When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of service of security updates with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1 Android ID: A-78644887.

Affected (1)

Products: Google: Android

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Android	Version 8.1

References (4)

http://www.securitytracker.com/id/1041432

Source: security@android.com

Third Party AdvisoryVDB Entry

https://source.android.com/security/bulletin/2018-08-01

Source: security@android.com

PatchVendor Advisory

http://www.securitytracker.com/id/1041432

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://source.android.com/security/bulletin/2018-08-01

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.