Skip to content
OpenAdvisories
High WID-SEC-2024-1774 5 CVEs

Pixel Patchday August 2024: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Aug 6, 2024 · Updated Aug 6, 2024 · de-DE

Vendor: Google Product: Android Platform: Android

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Pixel Android ausnutzen, um seine Privilegien zu erhöhen.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 5

  • High 7.8
    CVE-2024-32927

    In sendDeviceState_1_6 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to …

    Google Android Android
  • High 7.5
    CVE-2024-21479

    Buffer Over-read in Audio

    Transient DOS during music playback of ALAC content.

    Qualcomm Snapdragon
  • Medium 6.7
    CVE-2023-28577

    Multiple Dmabuf Kernel Address UAF Vulnerability

    In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which caus…

    Qualcomm Snapdragon
  • Medium 6.5
    CVE-2024-21459

    Buffer Over-read in WLAN HOST

    Information disclosure while handling beacon or probe response frame in STA.

    Qualcomm Snapdragon
  • Medium 6.5
    CVE-2024-21467

    Buffer Over-read in WLAN Host Communication

    Information disclosure while handling beacon probe frame during scan entry generation in client side.

    Qualcomm Snapdragon

Revision history

  1. #1

    Initiale Fassung

References