CoreCVE
Back

HIGH

In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c, there is a possible OOB write due to a missing bounds check

Published Dec 4, 2024

Description

In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner google_android
Published Dec 4, 2024
Updated Dec 5, 2024
Reserved Apr 5, 2018
Link CVE-2018-9395
CISA Vulnrichment
Updated Dec 5, 2024
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2018-9395
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-9395
ENISA EUVD
Assigner google_android
Published Dec 4, 2024
Updated Dec 5, 2024
Exploited since n/a
Link EUVD-2018-20989
EUVD-2018-20989