Published: 06/11/2018 Updated: 12/12/2018

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google android -

It was found that the Linux kernel is vulnerable to an out-of-bounds buffer write due to incorrect bounds check in driver_override_store() function in drivers/amba/busc This can lead to a memory corruption, a system panic, and to a denial of service Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believ ...

CWE-787 https://source.android.com/security/bulletin/pixel/2018-06-01 http://www.securityfocus.com/bid/105887 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2018-9385

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-9385

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect