Lucene search

K
osvGoogleOSV:ASB-A-319081336
HistoryJul 01, 2024 - 12:00 a.m.

Code execution in Chrome isolated service processes

2024-07-0100:00:00
Google
osv.dev
2
chrome
service processes
code execution
privilege escalation
logic error
zygote processes

8 High

AI Score

Confidence

High

In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform arbitrary code execution in any app zygote processes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

8 High

AI Score

Confidence

High