In gt1x_debug_write_proc and gt1x_tool_write of
drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c,
there is a possible out of bounds write due to a missing bounds check. This
could lead to local escalation of privilege with System execution privileges
needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
History
Thu, 19 Dec 2024 17:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* |
Thu, 05 Dec 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Google
Google android Google pixel |
|
Weaknesses | CWE-787 | |
CPEs | cpe:2.3:h:google:pixel:*:*:*:*:*:*:*:* cpe:2.3:o:google:android:*:*:*:*:*:*:*:* |
|
Vendors & Products |
Google
Google android Google pixel |
|
Metrics |
cvssV3_1
|
Wed, 04 Dec 2024 23:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2024-12-04T23:14:32.596Z
Updated: 2024-12-05T16:29:20.701Z
Reserved: 2018-04-05T00:00:00.000Z
Link: CVE-2018-9400
Vulnrichment
Updated: 2024-12-05T16:29:13.722Z
NVD
Status : Analyzed
Published: 2024-12-05T00:15:17.570
Modified: 2024-12-19T16:44:18.670
Link: CVE-2018-9400
Redhat
No data.