CVE-2018-9372
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Nov 19, 2024
Updated: Nov 21, 2024
CWE ID 787
Summary
CVE-2018-9372 is a vulnerability affecting the cmd_flash_mmc_sparse_img function in dl_commands.c. This issue involves a missing bounds check, which could result in an out-of-bounds write. The consequence of this vulnerability is a local privilege escalation in the bootloader, allowing an attacker to elevate their privileges without requiring additional execution permissions or user interaction.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.