Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-47015 EUVD-2024-42232GHSA-qrgq-qh39-4rq7

In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds …

Published Oct 25, 2024 · Updated Oct 25, 2024 · Assigned by Google_Devices

Description

In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References