High severity7.8NVD Advisory· Published Oct 2, 2018· Updated Jun 17, 2026

CVE-2018-9490

Description

In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111274046

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Androidllm-fuzzy2 versions
7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9.0+ 1 more
- (no CPE)range: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9.0
- (no CPE)range: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0

Patches

Vulnerability mechanics

References

android.googlesource.com/platform/external/v8/+/a24543157ae2cdd25da43e20f4e48a07481e6cebnvdPatchThird Party Advisory
www.securityfocus.com/bid/105484nvdThird Party AdvisoryVDB Entry
android.googlesource.com/platform/external/chromium-libpac/+/948d4753664cc4e6b33cc3de634ac8fd5f781382%2Cnvd
source.android.com/security/bulletin/2018-10-01%2Cnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000