A vulnerability, which was classified as problematic, was found in Google Android 7/8/8.1/9. Affected is the function hidh_l2cif_data_ind of the file hidh_conn.cc. The manipulation leads to out-of-bounds read.

This vulnerability is traded as CVE-2018-9486. It is possible to launch the attack on the local host. There is no exploit available.

It is recommended to apply a patch to fix this issue.