Skip to content
OpenAdvisories
Medium · 6.7 CVE-2018-9391 EUVD-2018-20985GHSA-q759-j7h3-76hj

In update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor ker.c, there is a pos…

Published Dec 5, 2024 · Updated Dec 6, 2024 · Assigned by google_android

Description

In update_gps_sv and output_vzw_debug of
vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor
ker.c, there is a possible out of bounds write due to a missing bounds
check. This could lead to local escalation of privilege with System
execution privileges needed. User interaction is not needed for
exploitation.

Affected products

VendorProductAffectedFixed
Google Android Kernel —

References