CVE-2024-27210

In policycheck of fvp.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27218

In updatefreqdata of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27218

In updatefreqdata of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27218

CVE-2024-27218 describes an out-of-bounds read in update_freq_data (TBD module), enabling local information disclosure without extra privileges and with no user interaction. Connected sources consistently cite a missing bounds check as the root cause and local disclosure as the impact. The Androi...

CVE-2024-27204

In tmusetgovactive of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27208

CVE-2024-27208 describes an out-of-bounds write due to a missing bounds check, enabling local privilege escalation with no user interaction. Public sources confirm this vulnerability is categorized as Elevation of Privilege (EoP) and listed under the Pixel security bulletin with subcomponent ACPM...

CVE-2024-27206

CVE-2024-27206 describes a potential out-of-bounds read caused by a missing bounds check, enabling remote information disclosure without privileges or user interaction. The connected sources reference this issue in the context of Google/Pixel Android security updates, but the provided documents d...

CVE-2024-27208

there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27206

there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-25993

CVE-2024-25993 involves a missing bounds check in the tmu_reset_tmu_trip_counter function, causing an out-of-bounds write that could enable local privilege escalation with no extra privileges or user interaction required. Public docs attribute this to Pixel/Android components and classify the imp...

CVE-2024-25993

In tmuresettmutripcounter of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-25993

In tmuresettmutripcounter of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-25992

CVE-2024-25992 is a out-of-bounds read in tmu_tz_control of tmu.c caused by a missing bounds check. The vulnerability enables local escalation of privilege with no additional execution privileges required and does not require user interaction. The provided connected sources (Red Hat, NVD, PRION, ...

CVE-2024-25992

In tmutzcontrol of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27204

In tmusetgovactive of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27204

CVE-2024-27204 involves an out-of-bounds write in tmu_set_gov_active of tmu.c caused by a missing bounds check. The issue allows local escalation of privilege with no additional privileges required and does not require user interaction. Connected sources confirm the vulnerability in media/firmwar...

CVE-2024-25989

In gpuslclivenessupdate of pixelgpuslc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-25985

In bigounlockedioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-25987

In ptsysctlcommand of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-25985

The CVE-2024-25985 issue affects the bigo_unlocked_ioctl path in bigo.c, described as a Use-After-Free caused by a missing bounds check. The impact is local privilege escalation with high severity (CVSS: LOCAL, NONE user interaction). Documents in multiple feeds (NVD, Red Hat, PRION, OSV) consist...