CVE-2018-9463

The vulnerability CVE-2018-9463 affects the touchscreen path in the Android kernel: In sw49408_irq_runtime_engine_debug (touch_sw49408.c), there is an out-of-bounds write caused by an incorrect bounds check. This can enable local privilege escalation with System execution privileges required and ...

CVE-2018-9439

The issue CVE-2018-9439 affects the Linux kernel’s af_packet.c, specifically in __unregister_prot_hook and packet_release. The root cause is an improper locking leading to a use-after-free scenario in the network stack. Impact described across sources is local privilege escalation with kernel-lev...

CVE-2018-9416

CVE-2018-9416 concerns memory corruption in the Linux kernel SCSI driver, specifically in sg_remove_scat (scsi/sg.c). The root cause is described as an unusual root cause leading to local escalation of privilege with System execution privileges needed; no user interaction required. Connected docu...

CVE-2018-9407

CVE-2018-9407 : In emmc_rpmb_ioctl of emmc_rpmb.c there is a Missing Bounds Check, leading to potential information disclosure of kernel data. Connected sources confirm this issue on Google Pixel devices and reference the Android Pixel/Nexus security bulletin, which states that patch levels of 20...

CVE-2018-9404

The CVE-2018-9404 issue affects Google Pixel/Nexus devices and is centered on the oemCallback function in ril.cpp, where an out-of-bounds write can result from an integer overflow. This could enable local elevation of privilege with System execution privileges required, and exploitation does not ...

CVE-2018-9403

CVE-2018-9403 describes a stack buffer overflow in the MTK FLP MSG HAL DIAG REPORT DATA NTF handler within the flp2hal_interface.c component. The underlying issue is a missing bounds check which can allow a local attacker with System privileges to escalate to higher privileges. Exploitation is lo...

CVE-2018-9400

The CVE-2018-9400 issue affects Mediatek GT1151 touchscreen drivers (GT1151/gt1x_generic.c and gt1x_tools.c). Root cause: missing bounds check enabling an out-of-bounds write in gt1x_debug_write_proc and gt1x_tool_write. Impact: local escalation of privilege with System execution privileges requi...

CVE-2018-9398

The CVE-2018-9398 entry concerns the Mediatek FM radio driver (fm_set_stat) with an out-of-bounds write caused by improper input validation. Affected component: Mediatek FM radio driver; vulnerable function: fm_set_stat. Impact: local escalation of privilege with System execution privileges requi...

CVE-2018-9396

CVE-2018-9396 affects the Mediatek port_rpc.c code path (drivers/misc/mediatek/eccci/port_rpc.c) where an incorrect bounds check enables an out-of-bounds write. This can lead to local escalation of privilege with SYSTEM execution privileges needed, and exploitation does not require user interacti...

CVE-2018-9395

The CVE-2018-9395 issue affects the Mediatek WLAN driver (mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config) in drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c. It describes a possible out-of-bounds write due to a missing bounds check, enabling local...

CVE-2018-9394

The CVE-2018-9394 entry concerns the MediaTek MTK P2P driver: mtk_p2p_wext_set_key in drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c. The vulnerability is an out-of-bounds (OOB) write caused by improper input validation, enabling local privilege escalation with System execution pr...

CVE-2018-9393

CVE-2018-9393 affects the MTK WLAN driver: a possible out-of-bounds write in procfile_write() of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c due to a missing bounds check. This can lead to local privilege escalation with System execution privileges; exploitation reportedly doe...

CVE-2018-9392

CVE-2018-9392 affects the Mediatek GPS HAL: in get_binary() of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c there is a possible out-of-bounds write due to a missing bounds check. This could enable local elevation of privilege with System execution privileges, and...

How to Plan a New (and Improved!) Password Policy for Real-World Security Challenges

Many organizations struggle with password policies that look strong on paper but fail in practice because they're too rigid to follow, too vague to enforce, or disconnected from real security needs. Some are so tedious and complex that employees post passwords on sticky notes under keyboards,...

CVE-2018-9449

The CVE-2018-9449 entry concerns Google Pixel/Nexus Android devices. The vulnerability is in the SDP discovery path, specifically the function process_service_search_attr_rsp in sdp_discovery.cc, where a missing bounds check can cause an out-of-bounds read. This leads to local information disclos...

CVE-2018-9441

CVE-2018-9441 affects the Android Pixel/Nexus stack, caused by an out-of-bounds read in sdp_copy_raw_data within sdp_discovery.cc due to an incorrect bounds check. This vulnerability enables local information disclosure without extra execution privileges; exploitation requires user interaction. M...

CVE-2018-9435

CVE-2018-9435 affects the Android Pixel/Nexus ecosystem (System component). The issue stems from a missing bounds check in gatt_process_error_rsp of gatt_cl.cc, enabling a possible out-of-bounds read leading to local information disclosure without user interaction. The Android Pixel/Nexus securit...

CVE-2018-9431

CVE-2018-9431 : The connected documents confirm a local elevation of privilege due to improper input validation in OSUInfo.java (OSUInfo component). The impact is described as local Privilege Escalation without user interaction. No exploit pathways, affected product versions, or fix/patch details...

CVE-2018-9429

CVE-2018-9429 involves an out-of-bounds read due to uninitialized data in the function buildImageItemsIfPossible of ItemTable.cpp, leading to possible information disclosure without extra privileges. The vulnerability is linked to Google Pixel/Nexus security context (Pixel bulletin) with a public...

CVE-2018-9426

CVE-2018-9426 summary (concrete details from connected docs) Root cause: In RSAKeyPairGenerator.getNumberOfIterations (RSAKeyPairGenerator.java), an incorrect implementation can produce weak RSA key pairs. Impact: Crypto vulnerability with no additional execution privileges; no user interaction r...