CVE-2024-32893

In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Configurations

Configuration 1 (hide)

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

History

11 Jul 2024, 14:04

Type Values Removed Values Added
CWE CWE-704
CVSS v2 : unknown
v3 : 8.1
v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
First Time Google android
Google
References () https://source.android.com/security/bulletin/pixel/2024-06-01 - () https://source.android.com/security/bulletin/pixel/2024-06-01 - Vendor Advisory

03 Jul 2024, 01:57

Type Values Removed Values Added
CWE CWE-125
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.1

17 Jun 2024, 12:43

Type Values Removed Values Added
Summary
  • (es) En _s5e9865_mif_set_rate de exynos_dvfs.c, existe una posible lectura fuera de los límites debido a una conversión incorrecta. Esto podría dar lugar a la divulgación de información local sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación.

13 Jun 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-13 21:15

Updated : 2024-07-11 14:04


NVD link : CVE-2024-32893

Mitre link : CVE-2024-32893

CVE.ORG link : CVE-2024-32893


JSON object : View

Products Affected

google

  • android
CWE
CWE-125

Out-of-bounds Read

CWE-704

Incorrect Type Conversion or Cast