VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 2, 2024· Updated Jun 17, 2026

CVE-2018-9426

CVE-2018-9426

Description

In  RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no additional execution privileges needed. User interaction is not needed for exploitation. Bulletin Fix: The fix is designed to correctly implement the key generation according to FIPS standard.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Google/Androidv56 versions
    7+ 5 more
    • (no CPE)range: 7
    • cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
  • Android X86/android-x86llm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.