CVE-2024-53842

State: PUBLISHED · Published: 2025-01-03 · Updated: 2025-01-03 · Assigner: Google_Devices

Description

In cc_SendCcImsInfoIndMsg of cc_MmConManagement.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE

CWE-787 — CWE-787 Out-of-bounds Write

Affected

Google / Android — v=Android kernel [affected]

CVSS

(none)

References

https://source.android.com/security/bulletin/pixel/2024-12-01

Source

cvelistV5-main/cves/2024/53xxx/CVE-2024-53842.json