Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-9416

No fix known EPSS <1%CVSS 10.0

In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Published 2024-12-04 · CVE record · OSV

Products: Google Android, google pixel