CVE-2024-22009 - In init_data of , there is a possible out of bounds write due to a missing bounds check

Back Back to CVE browser

HIGH

In init_data of , there is a possible out of bounds write due to a missing bounds check

Published Mar 11, 2024

7.1

HIGH

CVSS 3.1

EPSS 0.09%

Description

In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor Google Product Android Default
unaffected
Affected
- 13

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Google	Android	unaffected	Affected 13

Vendor Google Product Pixel Default
unknown
Affected
- acpm

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Google	Pixel	unknown	Affected acpm

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-19615
Advisory
https://source.android.com/security/bulletin/pixel/2024-03-01
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-19615		Advisory
https://source.android.com/security/bulletin/pixel/2024-03-01		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Google_Devices

Published Mar 11, 2024

Updated Aug 14, 2024

Reserved Jan 3, 2024

Link CVE-2024-22009

CISA Vulnrichment

Updated Mar 11, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-22009

Red Hat

No data

ENISA EUVD

Assigner Google_Devices

Published Mar 11, 2024

Updated Aug 14, 2024

Link EUVD-2024-19615

GitHub

No data