CVE-2018-9404

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Dec 5, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2018

CVE-2018-94056.7In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local es CVE-2018-94065.5In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation CVE-2018-94075.5In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclos CVE-2018-94084.4In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check. This could lead to CVE-2018-94097.8In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead t CVE-2018-94105.5In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information CVE-2018-94118.8In decrypt of ClearKeyCasPlugin.cpp there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote arbitra CVE-2018-94125.5In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of CVE-2018-94138.8In handle_notification_response of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to rem CVE-2018-94147.8In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to a missing bounds che CVE-2018-94157.8In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to loca CVE-2018-94166.7In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to local escalation