VDB
CVE-2018-9380
CVE-2018-9380
PUBLISHED
CVSS 8.800000190734863 HIGH
In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
EPSS 0.30% · 22.9th percentile
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.30%
22.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Android | 8, 8.1, 7 | |
| android | 8.0, 7.1.1, 7.1.2 | |
| android | 7.0, 8.0, 8.1 |
Timeline
- Dec 2, 2024 CVE Published
- Dec 2, 2024 CVE Updated
- Dec 3, 2024 EPSS Score
- Dec 20, 2024 EPSS Score
- Jan 7, 2025 EPSS Score
- Jan 24, 2025 EPSS Score
- Feb 11, 2025 EPSS Score
- Mar 17, 2025 EPSS Score
- Apr 4, 2025 EPSS Score
- Apr 21, 2025 EPSS Score
- May 8, 2025 EPSS Score
- May 26, 2025 EPSS Score