Skip to content
OpenAdvisories
Critical · 10.0 CVE-2024-47039 EUVD-2024-42760GHSA-gvx5-h8g7-3fhv

OOB Read in the android.hardware.boot.IBootControl/default service

Published Dec 18, 2024 · Updated Dec 18, 2024 · Assigned by Google_Devices

Description

In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local  information disclosure with no additional execution privileges needed. User  interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android v10 —

Advisories 1

References