CVE-2018-9365

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Nov 19, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2018

CVE-2018-93667.8In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer oveCVE-2018-93677.8In FT_ACDK_CCT_V2_OP_ISP_SET_TUNING_PARAS of Meta_CCAP_Para.cpp, there is a possible out of bounds write due to improper input validation. TCVE-2018-93687.8In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This couCVE-2018-93697.3In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilCVE-2018-93707.3In download.c there is a special mode allowing user to download data into memory and causing possible memory corruptions due to missing bounCVE-2018-93716.4In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mappCVE-2018-93727.8In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a loCVE-2018-93738.8In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remCVE-2018-93747.8In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege CVE-2018-93757.8In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confusCVE-2018-93766.7In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorreCVE-2018-93775.5In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This co
CVE-2018-9365: High severity, CVSS 8.8 | Vulnix