Skip to content
OpenAdvisories
Medium · 5.1 CVE-2018-9389 EUVD-2018-20983GHSA-983q-mwq9-x6m2

In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to loc…

Published Jan 17, 2025 · Updated Feb 3, 2025 · Assigned by google_android

Description

In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android Kernel —

References