Skip to content
OpenAdvisories
High · 7.8 CVE-2018-9372 EUVD-2018-20966GHSA-c76m-j64q-g5p2

In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a l…

Published Nov 19, 2024 · Updated Nov 21, 2024 · Assigned by google_android

Description

In cmd_flash_mmc_sparse_img of dl_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege in the bootloader with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android SoCVersion —

References