CVE-2018-9398
No fix known EPSS <1%CVSS 7.8
In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Products: Google Android, google pixel