Medium · 6.5 CVE-2018-9407 EUVD-2018-21001GHSA-8g56-c3fw-gr86

In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclos…

Published Dec 4, 2024 · Updated Dec 5, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclosure of kernel data.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	Kernel	—

References

https://source.android.com/security/bulletin/pixel/2018-06-01