CVE-2018-9416 In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to local escalation of privilege with System execution privileges needed. User inter...
CriticalCVSS 10.0
EPSS 0.16%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to
an unusual root cause. This could lead to local escalation of privilege with
System execution privileges needed. User interaction is not needed for
exploitation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | All versions | No fix listed |
| Google Android | = Kernel | No fix listed |
| Google Android | < 2018-07-05 | 2018-07-05 |
| Google pixel | < 2018-07-05 | 2018-07-05 |
References
- source.android.com vendor-advisory