Aller au contenu
Se connecter
7.8 Élevée

CVE-2018-9403 In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer…

Description

In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overflow due to a missing bounds check. This could lead to local escalation of privilege in a privileged process with System execution privileges needed. User interaction is not needed for exploitation.

Produits et versions touchés

Produit Versions touchées Corrigé en
Android Versions non publiées
pixel 2018 premières → < 2018-06-05 2018-06-05

Autres CVE de Android

Les 1729 CVE de Android →
CVE-2026-58977 In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check 6.7 Moyenne CVE-2026-58930 An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when… 7.8 Élevée CVE-2026-58927 The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized… 6.7 Moyenne CVE-2026-58926 A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t`… 2.5 Faible
Suivre cette CVE