In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2024-10-01 | Vendor Advisory |
Configurations
History
27 Jun 2025, 19:02
Type | Values Removed | Values Added |
---|---|---|
First Time |
Google android
|
|
References | () https://source.android.com/security/bulletin/2024-10-01 - Vendor Advisory | |
CPE | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* |
28 Jan 2025, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-01-28 20:15
Updated : 2025-06-27 19:02
NVD link : CVE-2024-34733
Mitre link : CVE-2024-34733
JSON object : View
Products Affected
- android
CWE
No CWE.