CVE-2018-9364

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-203

Affected software

VendorProductVersions
GoogleAndroidSoCVersion
googleandroidSoCVersion

References

Timeline

Published
Nov 19, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2018

CVE-2018-93658.8In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This coCVE-2018-93667.8In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer oveCVE-2018-93677.8In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. TCVE-2018-93687.8In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This couCVE-2018-93697.3In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilCVE-2018-93707.3In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounCVE-2018-93716.4In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mappCVE-2018-93727.8In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a loCVE-2018-93738.8In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remCVE-2018-93747.8In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege CVE-2018-93757.8In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confusCVE-2018-93766.7In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorre
CVE-2018-9364: High severity, CVSS 7.5 | Vulnix