Lucene search
HistoryNov 19, 2024 - 8:15 p.m.
CVE-2018-9368
cve-2018-9368
mtkscoaudio
arbitrary write
local privilege escalation
system execution
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
10.3%
In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELinux policies. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation.
Affected configurations
Node
googleandroidMatch-
Related
cvelist
cvelist
CVE-2018-9368
2024-11-19 19:16:25
vulnrichment
vulnrichment
CVE-2018-9368
2024-11-19 19:16:25
cve
cve
CVE-2018-9368
2024-11-19 20:15:27
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
10.3%
Related for NVD:CVE-2018-9368