CVE-2024-31334

2024-07-0920:11:27

google_android

www.cve.org

code execution

devmemintfreedefbackingpage

logic error

local escalation privilege

kernel

exploitation

user interaction not needed

EPSS

Percentile

9.2%

JSON

In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "Android SoC",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

source.android.com/security/bulletin/2024-07-01

EPSS

Percentile

9.2%

JSON

Related for CVELIST:CVE-2024-31334