Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Google Pixel ausnutzen, um seine Privilegien zu erhöhen oder Informationen offenzulegen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 25
-
High 7.8CVE-2024-29748 Exploited
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi…
KEV Apr 4, 2024 -
Medium 5.5CVE-2024-29745 Exploited
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure w…
KEV Apr 4, 2024 -
Critical 9.8
In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local …
-
High 8.4
In lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead …
-
High 8.4
In tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could le…
-
High 7.8
In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead t…
-
High 7.8
In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This coul…
-
High 7.7
In tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…
-
High 7.7
In tmu_set_control_temp_step of tmu.c, there is a possible out of bounds write due to a missing bounds check. This coul…
-
High 7.4
In tmu_set_table of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to lo…
-
High 7.3
there is a possible permission bypass due to Debug certs being allowlisted. This could lead to local escalation of priv…
-
Medium 6.7
In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to loca…
-
Medium 6.6
Buffer copy without checking size of input (Classic buffer overflow) in HLOS
Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.
-
Medium 6.2
In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local in…
-
Medium 5.9
In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.9
In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local…
-
Medium 5.5
In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to lo…
-
Medium 5.5
In gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…
-
Medium 5.5
In tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.5
In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could…
-
Medium 5.5
In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to l…
-
Medium 5.5
In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.5
In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead …
-
Medium 5.5
In tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could…
-
Medium 4.4
In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to loc…
Revision history
-
#1
Initiale Fassung
References
-
Google Pixel Security Bulletin April 2024 vom 2024-04-02
https://source.android.com/docs/security/bulletin/pixel/2024-04-01