Skip to content
OpenAdvisories
High · 7.8 CVE-2018-9394 EUVD-2018-20988GHSA-p998-wmcc-3j5w

In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper in…

Published Dec 4, 2024 · Updated Dec 5, 2024 · Assigned by google_android

Description

In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Kernel —

References