CVE-2018-9376: High severity android vulnerability

Published Dec 2, 2024

Updated

In rpcmsghandler and related handlers of drivers/misc/mediatek/eccci/portrpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected Software

7 affected components

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Remediation

Patch Available

https://source.android.com/docs/security/bulletin/pixel/2018-07-01

Event History

Dec 2, 2024

CVE Published

via MITRE·08:59 PM

Data Sourced

via MITRE·08:59 PM

Description

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-9376?

CVE-2018-9376 is classified as a high-severity vulnerability due to the potential for local privilege escalation.

How do I fix CVE-2018-9376?

To mitigate CVE-2018-9376, update your Android device to the latest security patch provided by Google.

What versions of Android are affected by CVE-2018-9376?

CVE-2018-9376 affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.

Is user interaction required to exploit CVE-2018-9376?

No, user interaction is not needed for the exploitation of CVE-2018-9376.

What consequences can arise from the exploitation of CVE-2018-9376?

Exploitation of CVE-2018-9376 may lead to a local escalation of privileges, allowing an attacker to gain system execution capabilities.