VDB

CVE-2018-9373

CVE-2018-9373 PUBLISHED CVSS 8.800000190734863 HIGH

In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS 1.59% · 82.0th percentile

Risk Scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.59%
82.0th percentile

Affected Products

VendorProductVersions
googleandroid
GoogleAndroid*

Timeline

  • Jun 5, 2018 CVE Published
  • Jan 28, 2025 PoC Published
  • Jan 28, 2025 PoC Published
  • Jan 28, 2025 PoC Published
  • Jan 28, 2025 PoC Published
  • Jan 28, 2025 PoC Published
  • Jan 29, 2025 EPSS Score
  • Feb 13, 2025 EPSS Score
  • Feb 28, 2025 EPSS Score
  • Mar 15, 2025 EPSS Score
  • Mar 30, 2025 EPSS Score
  • Apr 15, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›