VDB

CVE-2018-9404

CVE-2018-9404 PUBLISHED CVSS 6.699999809265137 MEDIUM

In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

EPSS 0.08% · 0.3th percentile

Risk Scores

CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.08%
0.3th percentile

Affected Products

VendorProductVersions
GoogleAndroidKernel
googleandroid
googleandroid0
googlepixel0

Timeline

  • Dec 4, 2024 CVE Published
  • Dec 4, 2024 PoC Published
  • Dec 5, 2024 EPSS Score
  • Dec 5, 2024 CVE Updated
  • Dec 22, 2024 EPSS Score
  • Jan 8, 2025 EPSS Score
  • Jan 25, 2025 EPSS Score
  • Feb 11, 2025 EPSS Score
  • Feb 28, 2025 EPSS Score
  • Mar 17, 2025 EPSS Score
  • Apr 3, 2025 EPSS Score
  • Apr 20, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›