CVE-2018-9372

Summary

CVE-2018-9372 is a vulnerability affecting the cmd_flash_mmc_sparse_img function in dl_commands.c. This issue involves a missing bounds check, resulting in a possible out-of-bounds write. Consequences of this vulnerability include a local escalation of privilege in the bootloader, meaning an attacker can gain elevated access without requiring additional execution privileges. Notably, user interaction is not necessary for an exploit to occur.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.