CoreCVE
Back

HIGH

In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a missing permission check

Published Nov 13, 2024

Description

In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-862

Missing Authorization

CWE-94

Code Injection

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner google_android
Published Nov 13, 2024
Updated Nov 14, 2024
Reserved Jul 8, 2024
Link CVE-2024-40671

CISA Vulnrichment

Updated Nov 14, 2024

NVD

Status Analyzed
Modified Jun 17, 2026
Link CVE-2024-40671

Red Hat

No data

ENISA EUVD

Assigner google_android
Published Nov 13, 2024
Updated Nov 14, 2024
Link EUVD-2024-38567

GitHub

No data