CVE-2018-9416

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Dec 5, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2018

CVE-2018-94177.8In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead to local escalation CVE-2018-94189.8In handle_app_cur_val_response of dtif_rc.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to reCVE-2018-94197.5In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infCVE-2018-94205.5In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data. This could lead tCVE-2018-94215.5In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could leCVE-2018-94227.8In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no addCVE-2018-94236.5In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds check. This could leCVE-2018-94247.8In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to locaCVE-2018-94257.8In Platform, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalatiCVE-2018-94267.5In  RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs beingCVE-2018-94277.8In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbiCVE-2018-94287.8In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbi
CVE-2018-9416: Medium severity, CVSS 6.7 | Vulnix