In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
History

Wed, 18 Dec 2024 21:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Thu, 05 Dec 2024 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google android
Google pixel
Weaknesses CWE-787
CPEs cpe:2.3:h:google:pixel:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Vendors & Products Google
Google android
Google pixel
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 04 Dec 2024 22:15:00 +0000

Type Values Removed Values Added
Description In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published: 2024-12-04T21:59:02.879Z

Updated: 2024-12-05T17:08:24.572Z

Reserved: 2018-04-05T00:00:00.000Z

Link: CVE-2018-9396

cve-icon Vulnrichment

Updated: 2024-12-05T17:07:56.449Z

cve-icon NVD

Status : Analyzed

Published: 2024-12-04T22:15:18.457

Modified: 2024-12-18T20:34:32.157

Link: CVE-2018-9396

cve-icon Redhat

No data.