In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
References
| Link | Resource |
|---|---|
| https://source.android.com/docs/security/bulletin/pixel/2018-06-01 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jun 2026, 02:06
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) En l2c_lcc_proc_pdu de l2c_fcr.cc, hay una posible escritura fuera de límites debido a una validación de entrada inadecuada. Esto podría llevar a una escalada remota de privilegios sin necesidad de privilegios de ejecución adicionales. Se necesita interacción del usuario para la explotación. |
18 Dec 2024, 19:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:* cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:* |
|
| References | () https://source.android.com/docs/security/bulletin/pixel/2018-06-01 - Patch, Vendor Advisory | |
| First Time |
Google
Google android |
|
| Summary |
|
02 Dec 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
02 Dec 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-02 20:15
Updated : 2026-06-17 02:06
NVD link : CVE-2018-9380
Mitre link : CVE-2018-9380
CVE.ORG link : CVE-2018-9380
JSON object : View
Products Affected
- android
CWE
CWE-787
Out-of-bounds Write