A vulnerability classified as critical was found in Google Android. This vulnerability affects the function update_gps_sv/output_vzw_debug of the file vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor. The manipulation leads to out-of-bounds write.

This vulnerability was named CVE-2018-9391. It is possible to launch the attack on the local host. There is no exploit available.

It is recommended to apply a patch to fix this issue.