Skip to content
OpenAdvisories
High WID-SEC-2024-2042 6 CVEs

Pixel Patchday September 2024: Mehrere Schwachstellen

Published Sep 3, 2024 · Updated Sep 3, 2024 · de-DE

Vendor: Google Product: Android

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen oder Informationen offenzulegen.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 6

  • High 7.8
    CVE-2024-44092

    There is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could l…

    Google Android Android
  • High 7.4
    CVE-2024-29779

    there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privil…

    Google Android Android
  • High 7.4
    CVE-2024-44093

    In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. Thi…

    Google Android Android
  • High 7.4
    CVE-2024-44094

    In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. Thi…

    Google Android Android
  • High 7.4
    CVE-2024-44095

    In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This c…

    Google Android Android
  • Medium 4.4
    CVE-2024-44096

    there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure wi…

    Google Android Android

Revision history

  1. #1

    Initiale Fassung

References