Skip to content
OpenAdvisories
Medium · 6.9 CVE-2024-10604 EUVD-2024-32906GHSA-mhfq-8c27-vp58

Identifiable Header Values In Fuchsia Leading To Tracking of The User

Published Jan 30, 2025 · Updated Feb 24, 2025 · Assigned by Google

Description

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances

Affected products

VendorProductAffectedFixed
Google Fuchsia — Release F19

References