CVE-2018-9416

In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
References
Configurations

Configuration 1 (hide)

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

History

18 Dec 2024, 20:49

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.7
References () https://source.android.com/security/bulletin/pixel/2018-07-01 - () https://source.android.com/security/bulletin/pixel/2018-07-01 - Vendor Advisory
CWE CWE-787
First Time Google android
Google
CPE cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

05 Dec 2024, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-12-05 00:15

Updated : 2024-12-18 20:49


NVD link : CVE-2018-9416

Mitre link : CVE-2018-9416


JSON object : View

Products Affected

google

  • android
CWE
CWE-787

Out-of-bounds Write