Lucene search

Google_androidVULNRICHMENT:CVE-2024-31334

HistoryJul 09, 2024 - 8:11 p.m.

CVE-2024-31334

2024-07-0920:11:27

google_android

github.com

cve-2024-31334

devmemintfreedefbackingpage

local escalation of privilege

kernel

logic error

user interaction not needed

AI Score

7.7

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:imaginationtech:powervr-gpu:-:*:*:*:*:*:*:*"
    ],
    "vendor": "imaginationtech",
    "product": "powervr-gpu",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

source.android.com/security/bulletin/2024-07-01