Heap Overflow Vulnerability in Android's mnh-sm.c Component
CVE-2018-9387

Currently unrated

Key Information:

Vendor
Google
Status
Android
Vendor
CVE Published:
18 January 2025

Summary

A vulnerability exists within multiple functions of the mnh-sm.c component of Android, where an integer overflow can lead to a heap overflow condition. This flaw can potentially allow an attacker to escalate privileges locally without requiring additional execution privileges. Notably, user interaction is not necessary for the exploitation of this vulnerability, making it particularly concerning for system security.

References

https://source.android.com/security/bulletin/pixel/2018-0...

Timeline

  • Vulnerability published

.