CVE-2018-9488

HIGH

Android 8.0-9.0 - Incorrect Authorization in SELinux crash_dump.te Permissions

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-9488. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit leverages CVE-2018-9488 to achieve privilege escalation from zygote to init on Android devices by manipulating mount namespaces, pivot_root(), and usermodehelper invocations. It combines multiple techniques, including CAP_SYS_ADMIN abuse and ptrace injection, to gain code execution in the init domain.

Description

In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead to a local escalation of privilege, with System privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9.0 Android ID: A-110107376.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textlocalandroid

https://www.exploit-db.com/exploits/45379

View Code ZIP pw:eip

This exploit leverages CVE-2018-9488 to achieve privilege escalation from zygote to init on Android devices by manipulating mount namespaces, pivot_root(), and usermodehelper invocations. It combines multiple techniques, including CAP_SYS_ADMIN abuse and ptrace injection, to gain code execution in the init domain.

Classification

Working Poc 90%

Attack Type

Lpe

Complexity

Complex

Reliability

Reliable

Target: Android (AOSP)

No auth needed

Prerequisites: CVE-2018-9445 to gain initial access to zygote · Ability to trigger system_server crash · Access to mount namespaces and CAP_SYS_ADMIN

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1134 - Access Token Manipulation T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2018-09-01

Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/45379/

Scores

CVSS v3 7.8

EPSS 0.0043

EPSS Percentile 33.9%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-863

Status published

Products (3)

google/android 8.0

google/android 8.1

google/android 9.0

Published Nov 06, 2018

Tracked Since Feb 18, 2026