VULNERABILITY INTELLIGENCE

CVE-2018-9339

CVSS score7.8 HIGH

EPSS probability0.09%

CISA KEVNot currently listed

Published2024-11-19

Last modified2026-06-17

Description

In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.