Google Android elevation of privilege vulnerability (CNVD-2024-37971)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to an integer overflow in attributeBytesBase64 and attributeBytesHix in BinaryXmlSerializer.java. An attacker can exploit this vulnerability to elevate...

CVE-2024-34740

In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-34740

In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-34740

CVE-2024-34740 affects Android frameworks where BinaryXmlSerializer.java writes byte arrays in attributeBytesBase64/attributeBytesHex. The root cause is an integer overflow when serializing a length (e.g., 65536) via writeShort, causing the length to wrap to zero and the bytes to be misinterprete...

ASB-A-307288067

In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...