A vulnerability was found in Google Android 7/8/8.1/9. It has been classified as problematic. This affects the function writeToParcel of the file MediaPlayer.java. The manipulation leads to deserialization.

This vulnerability is uniquely identified as CVE-2018-9474. Local access is required to approach this attack. There is no exploit available.

It is recommended to apply a patch to fix this issue.