Skip to content
OpenAdvisories
High WID-SEC-2024-3361 3 CVEs

Pixel Patchday November 2024: Mehrere Schwachstellen

Published Nov 6, 2024 · Updated Nov 6, 2024 · de-DE

Vendor: Google Product: Android Platform: Android

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android für Pixel Geräte ausnutzen, um seine Rechte zu erhöhen oder vertrauliche Informationen preiszugeben.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 3

  • Critical 10.0
    CVE-2024-47038

    In dhd_prot_flowrings_pool_release of dhd_msgbuf.c, there is a possible outcof bounds write due to a missing bounds che…

    Google Android Android
  • Critical 10.0
    CVE-2024-47039

    OOB Read in the android.hardware.boot.IBootControl/default service

    In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local  information disclosure with no additional execution privileges needed. User  interaction is not needed for exploitati…

    Google Android Android
  • Critical 10.0
    CVE-2024-47040

    Use After Free in the android.hardware.radio.sap.ISap/slot2 service

    There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

    Google Android Android

Revision history

  1. #1

    Initiale Fassung

References