CVE-2018-9593: In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8....

Security readout for executives and security teams

This Android NFC flaw could let a nearby attacker read information from affected devices without user interaction. The sources identify Android 7.0 through 9 as affected. Business risk is highest for legacy or unmanaged devices that still have NFC enabled and lack the January 2019 Android security updates. Exposure is most likely on unpatched Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, or 9 devices with NFC enabled. Modern patched devices are less likely to be exposed, but legacy enterprise phones, tablets, kiosks, or unmanaged BYOD devices should be checked. Treat this as a moderate legacy mobile risk. It is not evidenced as actively exploited in the provided sources, but unpatched NFC-enabled devices can create avoidable information-disclosure exposure, especially in public-facing, shared, or unmanaged environments. Mitigation focus: Apply Android security updates from the January 2019 bulletin or later vendor guidance.; Retire or isolate devices that cannot receive relevant vendor security updates.; Disable NFC on affected devices where business use does not require it..

Prepared

Jun 6, 2026, 21:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.