In oemCallback of ril.cpp, there is a possible out of bounds write due to an
integer overflow. This could lead to local escalation of privilege with
System execution privileges needed. User interaction is not needed for
exploitation.
Metrics
Affected Vendors & Products
References
History
Thu, 19 Dec 2024 17:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-190 | |
CPEs | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* |
Thu, 05 Dec 2024 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Google
Google android Google pixel |
|
Weaknesses | CWE-787 | |
CPEs | cpe:2.3:h:google:pixel:*:*:*:*:*:*:*:* cpe:2.3:o:google:android:*:*:*:*:*:*:*:* |
|
Vendors & Products |
Google
Google android Google pixel |
|
Metrics |
cvssV3_1
|
Wed, 04 Dec 2024 23:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2024-12-04T23:32:00.249Z
Updated: 2024-12-05T16:01:26.044Z
Reserved: 2018-04-05T00:00:00.000Z
Link: CVE-2018-9404
Vulnrichment
Updated: 2024-12-05T16:01:12.945Z
NVD
Status : Analyzed
Published: 2024-12-05T00:15:17.860
Modified: 2024-12-19T16:39:46.807
Link: CVE-2018-9404
Redhat
No data.