CVEvulnerability
CVE-2018-9463
6.7 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-12-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible
out of bounds write due to an incorrect bounds check. This could lead to
local escalation of privilege with System execution privileges needed. User
interaction is not needed for exploitation.
Affected configurations
• google android
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://source.android.com/security/bulletin/pixel/2018-08-01 Vendor Advisory