VDB

CVE-2018-9407

CVE-2018-9407 PUBLISHED CVSS 6.5 MEDIUM

In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclosure of kernel data.

EPSS 0.09% · 0.4th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.09%
0.4th percentile

Affected Products

VendorProductVersions
GoogleAndroidKernel
googleandroid

Timeline

  • Dec 4, 2024 CVE Published
  • Dec 4, 2024 PoC Published
  • Dec 5, 2024 EPSS Score
  • Dec 19, 2024 CVE Updated
  • Dec 22, 2024 EPSS Score
  • Jan 8, 2025 EPSS Score
  • Jan 25, 2025 EPSS Score
  • Feb 11, 2025 EPSS Score
  • Feb 28, 2025 EPSS Score
  • Mar 17, 2025 EPSS Score
  • Apr 3, 2025 EPSS Score
  • Apr 20, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›