CVE-2024-27235

In pluginexternfunc of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27235

CVE-2024-27235 is documented in Google Pixel security updates as affecting the ACPM component (Pixel). The root cause is an out-of-bounds read in the plugin_extern_func due to a missing bounds check, leading to possible local information disclosure with no required user interaction. The vulnerabi...