CVE-2024-32910

In handlemsgshmmapreq of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32916

In fvpfreqhistograminit of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32914

In tpugetintstate of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-29780

In hwbccnsdeprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32930

In pluginipchandler of slcplugin.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure of 4 bytes of stack memory with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32930

In pluginipchandler of slcplugin.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure of 4 bytes of stack memory with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32914

In tpugetintstate of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32916

In fvpfreqhistograminit of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32914

In tpugetintstate of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32914

A security vulnerability exists in the ACPM subcomponent of Google Pixel devices. The issue is caused by uninitialized data in the tpu_get_int_state function of tpu.c, which can lead to local information disclosure . This vulnerability does not require additional execution privileges or user inte...

CVE-2024-32916

A security vulnerability exists in the ACPM subcomponent of Google Pixel devices. The issue is caused by uninitialized data in the fvp_freq_histogram_init function of fvp.c, which can lead to local information disclosure . This vulnerability can be exploited without additional execution privilege...

CVE-2024-32910

The CVE-2024-32910 issue affects Trusty/TEE in the Android stack (tipc.c: handle_msg_shm_map_req). It describes a possible stack data disclosure from uninitialized data in the SPI/TIPC path, enabling local information disclosure without extra privileges or user interaction. The Android Pixel bull...

CVE-2024-32906

In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32910

In handlemsgshmmapreq of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32906

In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32906

CVE-2024-32906 affects Google Pixel/Android components: In the AcvpOnMessage function of avcp.cpp, uninitialized data may cause an Elevation of Privilege (EoP). This could enable local privilege escalation with no extra execution privileges and no user interaction required. The available connecte...

CVE-2024-29785

CVE-2024-29785 describes an information disclosure in the Aurora driver code path: the function name and file are aur_get_state in aurora.c. The root cause is uninitialized data leading to local information disclosure without extra privileges or user interaction. Affected entity is evidenced by m...

CVE-2024-29785

In aurgetstate of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-29785

In aurgetstate of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-29780

CVE-2024-29780 affects hwbcc_ns_deprivilege in trusty/user/base/lib/hwbcc/client/hwbcc.c, describing an uninitialized data condition that can disclose uninitialized stack data. The impact is local information disclosure with no extra privileges required and no user interaction needed. Exploitatio...