CVE-2024-31336

2024-09-1100:09:16

google_android

www.cve.org

imagination powervr-gpu

android

vulnerability

EPSS

Percentile

9.6%

JSON

In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Android",
    "vendor": "Google",
    "versions": [
      {
        "status": "affected",
        "version": "Android SoC"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2024-09-01

EPSS

Percentile

9.6%

JSON

Related for CVELIST:CVE-2024-31336