CVE-2024-22008

In configgovtimewindows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-22008

In configgovtimewindows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-22008

CVE-2024-22008 affects Google Pixel devices (Pixel bulletin context shows it under ACPM/TMU components). The vulnerability originates from a missing bounds check in the config_gov_time_windows function within tmu.c, causing an out-of-bounds write. This leads to local escalation of privilege with ...

Pixel Update Bulletin—March 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2024-03-05 or later address all issues in this bulletin and all issues in the March 2024 Android Securi...