Skip to content
OpenAdvisories
High · 7.8 CVE-2018-9371 EUVD-2018-20965GHSA-9wgr-rjc3-37wx

In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory map…

Published Nov 19, 2024 · Updated Nov 20, 2024 · Assigned by google_android

Description

In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with insufficient blacklisting/whitelisting. This could lead to local elevation of privilege, given physical access to the device with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android SoCVersion —

References