CVE-2024-56186

In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-56186

Summary (CVE-2024-56186): A vulnerability in the Google Pixel/Android stack where in closeChannel of secureelementimpl.cpp an incorrect bounds check can cause an out-of-bounds read, leading to local information disclosure without extra privileges or user interaction. The CVSSv3.1 base score is 5....

CVE-2024-56186

In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...