CVE-2018-9376
First published: Mon Dec 02 2024(Updated: )
In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | =6.0 | |
| Android | =6.0.1 | |
| Android | =7.0 | |
| Android | =7.1.1 | |
| Android | =7.1.2 | |
| Android | =8.0 | |
| Android | =8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2018-9376?
CVE-2018-9376 is classified as a high-severity vulnerability due to the potential for local privilege escalation.
How do I fix CVE-2018-9376?
To mitigate CVE-2018-9376, update your Android device to the latest security patch provided by Google.
What versions of Android are affected by CVE-2018-9376?
CVE-2018-9376 affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.
Is user interaction required to exploit CVE-2018-9376?
No, user interaction is not needed for the exploitation of CVE-2018-9376.
What consequences can arise from the exploitation of CVE-2018-9376?
Exploitation of CVE-2018-9376 may lead to a local escalation of privileges, allowing an attacker to gain system execution capabilities.
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/weakness
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/google
- canonical/android
- version/android/6.0
- version/android/6.0.1
- version/android/7.0
- version/android/7.1.1
- version/android/7.1.2
- version/android/8.0
- version/android/8.1