high7.8Public exploit code
CVE-2018-9488
In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Android - 'zygote->init;' Chain from USB Privilege Escalation2018-09-11 · local · android · Verified
Impact
In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalation of privilege, with System privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9.0 Android ID: A-110107376.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 8.0, 8.1, 9.0 |