Skip to content
OpenAdvisories
High · 7.8 CVE-2018-9409 EUVD-2018-21003GHSA-ggcq-5v24-32h6

In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead …

Published Nov 19, 2024 · Updated Nov 20, 2024 · Assigned by google_android

Description

In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 8.1 —

References