VDB

CVE-2018-9401

CVE-2018-9401 PUBLISHED CVSS 7.800000190734863 HIGH

In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS 0.10% · 0.8th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.10%
0.8th percentile

Affected Products

VendorProductVersions
GoogleAndroid*
googleandroid

Timeline

  • Jan 17, 2025 CVE Published
  • Jan 17, 2025 PoC Published
  • Jan 18, 2025 EPSS Score
  • Jan 18, 2025 PoC Published
  • Jan 18, 2025 PoC Published
  • Feb 3, 2025 EPSS Score
  • Feb 18, 2025 EPSS Score
  • Mar 6, 2025 EPSS Score
  • Mar 21, 2025 EPSS Score
  • Apr 6, 2025 EPSS Score
  • Apr 21, 2025 EPSS Score
  • May 7, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›