LG LAF Component Vulnerability: Bypass of Secure Boot through Special Command
CVE-2018-9364

7.5HIGH

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
19 November 2024

What is CVE-2018-9364?

The vulnerability in the LG LAF component exposes devices to risks by permitting unauthorized modifications to certain partitions. This flaw can lead to the circumvention of secure boot processes, which are critical for preventing unauthorized code execution during the booting of a device. The nature of the vulnerability does not require user interaction, making it particularly concerning for the security posture of affected LG products.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Android SoCVersion

References

https://source.android.com/security/bulletin/2018-06-01

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.