CVE-2018-9518

In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check

published December 7, 2018

CVSS
—
EPSS
0%
Percentile
17.4
In the wild
Unconfirmed
What it is

In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-73083945.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.4th percentile
Published
2018-12-07T23:00Z
EPSS history
Timeline
  • 07 DEC 23:00Z
    In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check
    cvelistv5