CoreCVE
Back

HIGH

In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper input validation

Published Dec 4, 2024

Description

In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner google_android
Published Dec 4, 2024
Updated Dec 5, 2024
Reserved Apr 5, 2018
Link CVE-2018-9394
CISA Vulnrichment
Updated Dec 5, 2024
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2018-9394
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-9394