High
fdkaac — security advisory
In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112662184
- Products
- fdkaac
- Affected versions
- 0.6.2-1, 0.6.2-1ubuntu0.1~esm1, 0.6.3-1, 0.6.3-1ubuntu0.18.04.1~esm1, 0.6.3-1ubuntu0.20.04.1~esm1, 1.0.0-1build1, 1.0.0-1ubuntu0.22.04.1~esm1, 1.0.0-1ubuntu0.24.04.1~esm1, 1.0.6-0.1build1
- Fixed versions
- Not specified
- CVEs
- CVE-2018-9536
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:30 UTC · Revision 1
Source evidence
In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112662184
osv:UBUNTU-CVE-2018-9536
fdkaac
Fixed versions: Not specified
fdkaac
Fixed versions: Not specified
fdkaac
Fixed versions: Not specified
fdkaac
Fixed versions: Not specified
fdkaac
Fixed versions: Not specified
fdkaac
Fixed versions: Not specified
fdkaac
Fixed versions: Not specified
fdkaac
Fixed versions: Not specified
Complete source record
{
"id": "ce787cc21d103695908f7de561670bf609aa49d798b69b4507a0ed800016141e",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-9536",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2018-9536",
"summary": "In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112662184",
"evidence": "osv:UBUNTU-CVE-2018-9536",
"products": [
{
"name": {
"value": "fdkaac",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.6.2-1",
"evidence": "/affected/0/versions"
},
{
"value": "0.6.2-1ubuntu0.1~esm1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "fdkaac",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.6.3-1",
"evidence": "/affected/1/versions"
},
{
"value": "0.6.3-1ubuntu0.18.04.1~esm1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "fdkaac",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.6.3-1",
"evidence": "/affected/2/versions"
},
{
"value": "0.6.3-1ubuntu0.20.04.1~esm1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "fdkaac",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.0.0-1build1",
"evidence": "/affected/3/versions"
},
{
"value": "1.0.0-1ubuntu0.22.04.1~esm1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "fdkaac",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.0.0-1build1",
"evidence": "/affected/4/versions"
},
{
"value": "1.0.0-1ubuntu0.24.04.1~esm1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "fdkaac",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.0.0-1build1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "fdkaac",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.0.0-1build1",
"evidence": "/affected/6/versions"
},
{
"value": "1.0.6-0.1build1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "fdkaac",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.0.0-1build1",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "UBUNTU-CVE-2018-9536",
"aliases": [
"UBUNTU-CVE-2018-9536"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fdkaac",
"purl": "pkg:deb/ubuntu/fdkaac?arch=source&distro=esm-apps%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"0.6.2-1",
"0.6.2-1ubuntu0.1~esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-9536.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "fdkaac",
"binary_version": "0.6.2-1ubuntu0.1~esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fdkaac",
"purl": "pkg:deb/ubuntu/fdkaac?arch=source&distro=esm-apps%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"0.6.3-1",
"0.6.3-1ubuntu0.18.04.1~esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-9536.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "fdkaac",
"binary_version": "0.6.3-1ubuntu0.18.04.1~esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fdkaac",
"purl": "pkg:deb/ubuntu/fdkaac?arch=source&distro=esm-apps%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"0.6.3-1",
"0.6.3-1ubuntu0.20.04.1~esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-9536.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "fdkaac",
"binary_version": "0.6.3-1ubuntu0.20.04.1~esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fdkaac",
"purl": "pkg:deb/ubuntu/fdkaac?arch=source&distro=esm-apps%2Fjammy",
"ecosystem": "Ubuntu:Pro:22.04:LTS"
},
"versions": [
"1.0.0-1build1",
"1.0.0-1ubuntu0.22.04.1~esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-9536.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "fdkaac",
"binary_version": "1.0.0-1ubuntu0.22.04.1~esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fdkaac",
"purl": "pkg:deb/ubuntu/fdkaac?arch=source&distro=esm-apps%2Fnoble",
"ecosystem": "Ubuntu:Pro:24.04:LTS"
},
"versions": [
"1.0.0-1build1",
"1.0.0-1ubuntu0.24.04.1~esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-9536.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "fdkaac",
"binary_version": "1.0.0-1ubuntu0.24.04.1~esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fdkaac",
"purl": "pkg:deb/ubuntu/fdkaac?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"1.0.0-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-9536.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "fdkaac",
"binary_version": "1.0.0-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fdkaac",
"purl": "pkg:deb/ubuntu/fdkaac?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"1.0.0-1build1",
"1.0.6-0.1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-9536.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "fdkaac",
"binary_version": "1.0.6-0.1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "fdkaac",
"purl": "pkg:deb/ubuntu/fdkaac?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"1.0.0-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-9536.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "fdkaac",
"binary_version": "1.0.0-1build1"
}
]
}
}
],
"modified": "2026-10-17T12:55:29.042321649Z",
"provider": "osv",
"upstream": [
"CVE-2018-9536"
],
"references": [
"https://ubuntu.com/security/CVE-2018-9536",
"https://source.android.com/security/bulletin/2018-11-01",
"https://www.cve.org/CVERecord?id=CVE-2018-9536"
]
},
"related_cves": [
{
"value": "CVE-2018-9536",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 353818,
"published_at": "2018-11-14T18:29:00+00:00"
}