CVE-2018-9357: In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check.

Security readout for executives and security teams

CVE-2018-9357 is an Android local privilege escalation issue in the BNEP_Write component. A user-level process could potentially write outside expected memory bounds and gain higher privileges. The public record names Android 6.0 through 8.1. There is no provided evidence of active exploitation. Exposure is most likely on legacy Android devices running Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, or 8.1 without the relevant Android security bulletin fixes. Modern fully patched Android fleets are less likely to remain exposed, but unsupported devices need verification. Treat this as a legacy Android fleet hygiene issue with privilege-escalation impact. It is not supported as actively exploited in the provided sources, but exposed unmanaged or unsupported devices can increase risk after any initial compromise. Mitigation focus: Apply Android vendor or OEM security updates covering the June 2018 bulletin.; Inventory Android 6.0 through 8.1 devices and identify unsupported systems.; Retire or isolate devices that cannot receive vendor security updates..

Prepared

Jun 6, 2026, 22:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.