CVE-2024-27227

CVE-2024-27227 affects Google Pixel devices via the modem component, with remote code execution reported as the impact. The Pixel security bulletin lists this CVE under the Modem subcomponent with a High severity and notes that applying patch level 2024-03-05 or later mitigates issues described i...

CVE-2024-27233

CVE-2024-27233 affects the ppcfw_init_secpolicy function in ppcfw.c, describing a possible permission bypass caused by uninitialized data that could enable local privilege escalation with no extra privileges and no user interaction. Connected sources (Red Hat, NVD, PRION, CVE listings) corroborat...

CVE-2024-27228

CVE-2024-27228 is a remote code execution in Google's Pixel MFC component caused by a heap buffer overflow/out-of-bounds write. The issue requires no user interaction and can be triggered over the network. Pixel Update Bulletin lists this CVE as Critical (RCE) with affected Pixel devices; remedia...

CVE-2024-27229

CVE-2024-27229 describes a null pointer dereference in ss_SendCallBarringPwdRequiredIndMsg within ss_CallBarring.c, leading to remote denial of service without user interaction. The vulnerability is tracked in Android/Pixel advisories and is listed in the Pixel March 2024 update bulletin with DoS...

CVE-2024-27221

CVE-2024-27221 describes an out-of-bounds write in the update_policy_data function caused by a missing bounds check, enabling local elevation of privilege without user interaction. Public references in the connected documents point to Google Pixel as affected, with the issue categorized as EoP an...

CVE-2024-27220

CVE-2024-27220 affects Google Pixel/Android components; in lpm_req_handler (TBD module), a missing bounds check allows out-of-bounds memory access. This leads to local escalation of privilege with no user interaction required. The issue is classified as Elevation of Privilege (EoP) and appears in...

CVE-2024-27223

The CVE-2024-27223 issue is an information-disclosure vulnerability in the EUTRAN_LCS_DecodeFacilityInformationElement function of LPP_LcsManagement.c, caused by a missing bounds check that enables an out-of-bounds read. The impact is remote information disclosure after authenticating the cell co...

CVE-2024-27224

CVE-2024-27224 is an out-of-bounds write in strncpy.c (strncpy), causing local elevation of privilege due to a missing bounds check. Documented as an EoP issue affecting Google Pixel components (Little Kernel) with exploitation details not provided in the supplied sources. The vulnerability is li...

CVE-2024-27219

CVE-2024-27219 concerns a vulnerability in the tmu_set_pi function of tmu.c where a missing bounds check allows an out-of-bounds write. The issue enables local privilege escalation with no additional execution privileges required and does not require user interaction. Public technical details in ...

CVE-2024-27211

CVE-2024-27211 : Affects the AtiHandleAPOMsgType function in ati_Main.c. The vulnerability is an out-of-bounds write (OOB) caused by a missing null check, enabling local escalation of privilege with no additional execution privileges required and with no user interaction needed. Multiple sources ...

CVE-2024-27210

CVE-2024-27210 involves an out-of-bounds write in the policy_check function of fvp.c that can enable local privilege escalation with no user interaction. The vulnerability is associated with Google Pixel/Android components per multiple sources, but none of the connected documents provide concrete...

CVE-2024-27208

CVE-2024-27208 describes an out-of-bounds write due to a missing bounds check, enabling local privilege escalation with no user interaction. Public sources confirm this vulnerability is categorized as Elevation of Privilege (EoP) and listed under the Pixel security bulletin with subcomponent ACPM...

CVE-2024-25993

CVE-2024-25993 involves a missing bounds check in the tmu_reset_tmu_trip_counter function, causing an out-of-bounds write that could enable local privilege escalation with no extra privileges or user interaction required. Public docs attribute this to Pixel/Android components and classify the imp...

CVE-2024-27207

CVE-2024-27207 affects Android/Google Pixel devices and is described as an elevation-of-privilege issue caused by exported broadcast receivers that can bypass broadcast protection. The Red Hat/NVD entries reiterate the export receivers vulnerability with the same description, and the Android Pixe...

CVE-2024-25992

CVE-2024-25992 is a out-of-bounds read in tmu_tz_control of tmu.c caused by a missing bounds check. The vulnerability enables local escalation of privilege with no additional execution privileges required and does not require user interaction. The provided connected sources (Red Hat, NVD, PRION, ...

CVE-2024-27205

CVE-2024-27205 describes memory corruption due to a use-after-free, leading to local escalation of privilege with no user interaction. The available documents indicate a HIGH-severity, LOCAL-exploitation scenario with no exploitation prerequisites; no specific affected product/version or fix is p...

CVE-2024-25988

CVE-2024-25988 describes an out-of-bounds read in the SAEMM_DiscloseGuti path of SAEMM_RadioMessageCodec.c, causing potential remote information disclosure without extra execution privileges. Affected component is related to Google/Pixel modem code; exploitation is described as requiring no user ...

CVE-2024-25990

The CVE-2024-25990 issue affects the Google Pixel Android stack described in multiple sources: the function pktproc_perftest_gen_rx_packet_sktbuf_mode in link_rx_pktproc.c experiences an out-of-bounds write due to a race condition. This vulnerability is claimed to permit local escalation of privi...

CVE-2024-25987

The CVE-2024-25987 entry describes an out-of-bounds write in the pt_sysctl_command function of pt.c due to an incorrect bounds check. This can enable local privilege escalation with system execution privileges needed, and exploitation does not require user interaction. The available documents do ...

CVE-2024-25986

CVE-2024-25986 affects the drm_fw.c component’s ppmp_unprotect_buf logic, enabling possible protection-memory compromise and local escalation of privilege to TEE without extra execution privileges; user interaction is not required. No exploitation details or patch information are provided in the ...