Vulnerabilities > CVE-2018-9487 - Unspecified vulnerability in Google Android 8.0/8.1/9.0
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 3 |