Skip to content
OpenAdvisories
High · 7.8 CVE-2024-47032 EUVD-2024-42859GHSA-pwr4-4xx9-866h

In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead t…

Published Jan 3, 2025 · Updated Jan 3, 2025 · Assigned by Google_Devices

Description

In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References