Lucene search

K
cve[email protected]CVE-2024-32903
HistoryJun 13, 2024 - 9:15 p.m.

CVE-2024-32903

2024-06-1321:15:54
web.nvd.nist.gov
20
vulnerability
escalation
privilege
input validation

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "Android kernel",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-32903