high7.8

CVE-2018-9402

In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check.

Impact

In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel.

Affected products

Vendor	Product	Affected versions
Google	Android	All versions

Weakness classification

CWE-787 CWE-120

References

NVD record
CVE.org record
https://source.android.com/security/bulletin/pixel/2018-06-01