CVE-2024-49714

In avrcvendormsg of avrcopt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49714

A heap-based buffer overflow in the avrc_vendor_msg function of the avrc_opt.cc module in Android operating systems allows an attacker to perform an out-of-bounds write. This vulnerability can lead to an elevation of privilege on a paired device without requiring additional execution privileges o...