CVE-2018-9376: 
NixOS vulnerability analysis and mitigation

In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This vulnerability affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The vulnerability was disclosed and patched in July 2018 (Android Bulletin).

CVE-2018-9376 is classified as an Elevation of Privilege (EoP) vulnerability with a moderate severity rating. The vulnerability requires high privileges for exploitation and local access to the device. No user interaction is needed for exploitation. The issue stems from an incorrect bounds check in the rpc_msg_handler and related handlers, which could lead to an out of bounds write condition (Android Bulletin).

If exploited, this vulnerability could lead to local escalation of privilege with System execution privileges. The successful exploitation would allow an attacker with high privileges to gain elevated system access on affected Android devices (Android Bulletin).

Google addressed this vulnerability in the Android Security Patch Level 2018-07-05. Users should update their Android devices to a security patch level of 2018-07-05 or later to protect against this vulnerability (Android Bulletin).