CVE-2018-9470: 
NixOS vulnerability analysis and mitigation

In bffScanneraddOutPos of Scanner.c, there is a possible out-of-bounds write vulnerability (CVE-2018-9470) that affects Android operating system versions 7.0 through 9.0. The vulnerability was disclosed in September 2018 and stems from an incorrect bounds check in the system (Android Bulletin).

The vulnerability is classified as an Elevation of Privilege (EoP) issue with a High severity rating. It has been assigned a CVSS v3.1 Base Score of 8.8 (HIGH) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is associated with CWE-787 (Out-of-bounds Write) (NVD).

This vulnerability could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. The successful exploitation could allow an attacker to gain elevated privileges within the system (NVD).

The vulnerability was patched in the September 2018 Android Security Bulletin. Users should update their Android devices to a security patch level of 2018-09-01 or later to address this issue. The fix has been released to the Android Open Source Project (AOSP) repository (Android Bulletin).