CVE-2018-9439

A use-after-free vulnerability exists in the Linux kernel 's network stack (specifically within __unregister_prot_hook and packet_release functions of af_packet.c) due to improper locking . This flaw could allow an attacker with System execution privileges to achieve a local escalation of privile...

CVE-2018-9408

The CVE-2018-9408 issue affects the GPS subsystem, specifically the m3326_gps_write and m3326_gps_read handlers in gps.s. The vulnerability is described as an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with system execution privileges required. Expl...

CVE-2018-9403

The Google Pixel smartphone is susceptible to a stack buffer overflow vulnerability in the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler located within flp2hal_interface.c. This issue is caused by a missing bounds check , which could allow an attacker to achieve local escalation of privilege in a ...

CVE-2018-9402

CVE-2018-9402: A buffer overwrite in multiple functions of gl_proc.c due to a missing bounds check could lead to kernel privilege escalation. The issue is documented across several sources (NVD/Red Hat CNVD/CNNVD/CIRCL and related Android Pixel bulletin context) with no exploitation details provi...

CVE-2018-9400

CVE-2018-9400 involves an out-of-bounds write vulnerability in the Goodix Touchscreen Driver within the MediaTek components of certain Google Pixel and Nexus devices . The flaw is caused by a missing bounds check in the gt1x_debug_write_proc and gt1x_tool_write functions located in drivers/input/...

CVE-2018-9399

The /proc/driver/wmt_dbg driver contains multiple out-of-bounds writes that can lead to local escalation of privilege . Exploitation requires System execution privileges and does not require user interaction. This vulnerability affects Google Pixel and Nexus devices. Security patch levels of 2018...

CVE-2018-9396

A security vulnerability exists in the MediaTek CCCI component (specifically in drivers/misc/mediatek/eccci/port_rpc.c) due to an incorrect bounds check in the rpc_msg_handler and related handlers. This flaw can lead to an out-of-bounds write , potentially allowing for local escalation of privile...

CVE-2018-9395

A possible out-of-bounds (OOB) write exists in the Mediatek WLAN driver due to a missing bounds check in the mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config functions within drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c. This vulnerability could ...

CVE-2018-9394

A vulnerability exists in the mtk_p2p_wext_set_key function of the gl_p2p.c file within the MediaTek P2P driver (drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c). The flaw is caused by improper input validation , which can result in an out-of-bounds (OOB) write . This issue could l...

CVE-2018-9393

CVE-2018-9393 is an Elevation of Privilege (EoP) vulnerability affecting the Linux kernel , specifically within the MediaTek wlan component. The root cause is a missing bounds check in the procfile_write function located in drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, which al...

CVE-2018-9392

A vulnerability exists in the GPS HAL of MediaTek components, specifically within the get_binary function of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c. The issue is caused by a missing bounds check , leading to a possible out-of-bounds write . This flaw could ...

Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10979 postgresq...

CVE-2018-9430

CVE-2018-9430 is an out-of-bounds write in btif_storage.cc (prop2cfg) that can lead to remote code execution without user interaction. Affected: Android Pixel/Nexus devices; root cause described as incorrect bounds check triggering a write beyond limits. Impact: high (RCE), network attack vector ...

CVE-2018-9426

CVE-2018-9426 summary (concrete details from connected docs) Root cause: In RSAKeyPairGenerator.getNumberOfIterations (RSAKeyPairGenerator.java), an incorrect implementation can produce weak RSA key pairs. Impact: Crypto vulnerability with no additional execution privileges; no user interaction r...

CVE-2018-9423

CVE-2018-9423 affects the Media framework component (ihevcd_parse_slice_header.c) where a missing bounds check allows an out-of-bounds read, leading to DoS. Exploitation requires user interaction. Several connected sources (NVD/Red Hat/Android bulletin) confirm the issue and cite the root cause. ...

CVE-2018-9418

CVE-2018-9418 involves a possible stack buffer overflow in the Android kernel/user-space component described as dtif_rc.cc:handle_app_cur_val_response, caused by a missing bounds check. The Red Hat/NVD/CVE records align with the Android Pixel/Nexus security bulletin noting this issue as a Remote ...

CVE-2018-9381

CVE-2018-9381 affects the gatt_sr.c component, specifically the gatts_process_read_by_type_req path, where uninitialized data can cause information disclosure. The issue enables remote information disclosure without additional execution privileges and requires no user interaction. Publicly disclo...

CVE-2018-9374

CVE-2018-9374 affects Android’s PackageManagerService.java, specifically installPackageLI, enabling a possible permissions bypass that could lead to local elevation of privilege. Exploitation would require local user privileges with no user interaction, per the CVE description. The issue is liste...

CVE-2018-9352

CVE-2018-9352 affects the ihevcd_allocate_dynamic_bufs function in ihevcd_api.c. The vulnerability is a resource exhaustion due to an integer overflow, potentially enabling remote denial of service with no code execution required. Exploitation requires user interaction. Connected sources (Red Hat...

CVE-2018-9350

CVE-2018-9350 describes a vulnerability in ih264d_assign_pic_num (ih264d_utils.c) where a missing bounds check can cause an out-of-bounds read, resulting in a denial of service. The issue is triggered by user interaction and would be exploitable remotely via the affected component, as indicated b...