Google Android 'Framework' Component Multiple Security Vulnerabilities

Bugtraq ID:	105484
Class:	Unknown
CVE:	CVE-2018-9490 CVE-2018-9491 CVE-2018-9492 CVE-2018-9493 CVE-2018-9452
Remote:	Yes
Local:	No
Published:	Oct 01 2018 12:00AM
Updated:	Oct 01 2018 12:00AM
Credit:	Google
Vulnerable:	Google Pixel XL 0 Google Pixel C 0 Google Pixel 0 Google Nexus 9 Google Nexus 7 Google Nexus 6P Google Nexus 6 Google Nexus 5X Google Nexus 10 Google Android 7.1.1 Google Android 9.0 Google Android 8.1 Google Android 8.0 Google Android 7.1.2 Google Android 7.0
Not Vulnerable:

Google Android 'Framework' Component Multiple Security Vulnerabilities

Google Android is prone to the following security vulnerabilities:

1. Multiple remote-code execution vulnerabilities
2. An information-disclosure vulnerability
3. A denial-of-service vulnerability

An attacker can exploit these issues to obtain sensitive information or execute arbitrary code. Failed exploits may result in a denial-of-service condition.

These issues are being tracked by Android Bug IDs A-111274046, A-111603051, A-111934948, A-111085900, and A-78464361.

Google Android 'Framework' Component Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Android 'Framework' Component Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.