medium5.5

CVE-2018-9407

In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check.

Impact

In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclosure of kernel data.

Affected products

Vendor	Product	Affected versions
Google	Android	All versions

Weakness classification

CWE-125

References

NVD record
CVE.org record
https://source.android.com/security/bulletin/pixel/2018-06-01