UpHeron
All vulnerabilities

Servers and applications

CVE-2018-9481

In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity
Medium 6.5
Published
20 Nov 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.1.10, 8.0.7
Sources
NVD

Affected software

SoftwareAffected versions
Apache Traffic ServerServers and applications · cpe:a:apache:traffic_server
  • From 6.0.0 up to 6.2.3
  • From 7.0.0 before 7.1.10
  • From 8.0.0 before 8.0.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-9481
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-9481