CVE-2018-9364
HIGHAndroid LG LAF Component - Secure Boot Bypass via Special Command
Title source: llmDescription
In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction is not needed for exploitation.
References (1)
Core 1
Core References
Vendor Advisory
https://source.android.com/security/bulletin/2018-06-01
Scores
CVSS v3
7.5
EPSS
0.0021
EPSS Percentile
10.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-203
Status
published
Products (1)
google/android
Published
Nov 19, 2024
Tracked Since
Feb 18, 2026