ID
VAR-202402-0523
CVE
CVE-2024-22012
TITLE
Google of Android Out-of-bounds write vulnerability in
Trust: 0.8
DESCRIPTION
there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Google of Android Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Google Pixel is a smartphone made by the American company Google. Google Pixel has a buffer overflow vulnerability caused by a lack of bounds checking. An attacker could exploit this vulnerability to escalate privileges
Trust: 2.25
IOT TAXONOMY
| category: | ['IoT'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | model: | android | scope: | eq | version: | - | Trust: 1.8 | |
| vendor: | model: | android | scope: | - | version: | - | Trust: 1.4 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
PATCH
| title: | Patch for Google Pixel buffer overflow vulnerability (CNVD-2024-09897) | url: | https://www.cnvd.org.cn/patchInfo/show/528041 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-22012 | Trust: 3.3 |
| db: | JVNDB | id: | JVNDB-2024-002724 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2024-09897 | Trust: 0.6 |
| db: | VULMON | id: | CVE-2024-22012 | Trust: 0.1 |
REFERENCES
| url: | https://source.android.com/security/bulletin/pixel/2024-02-01 | Trust: 1.9 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-22012 | Trust: 1.4 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | CNVD | id: | CNVD-2024-09897 |
| db: | VULMON | id: | CVE-2024-22012 |
| db: | JVNDB | id: | JVNDB-2024-002724 |
| db: | NVD | id: | CVE-2024-22012 |
LAST UPDATE DATE
2024-08-14T13:51:53.628000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-09897 | date: | 2024-02-24T00:00:00 |
| db: | VULMON | id: | CVE-2024-22012 | date: | 2024-02-07T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-002724 | date: | 2024-02-19T04:49:00 |
| db: | NVD | id: | CVE-2024-22012 | date: | 2024-03-12T21:15:57.953 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-09897 | date: | 2024-02-23T00:00:00 |
| db: | VULMON | id: | CVE-2024-22012 | date: | 2024-02-07T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-002724 | date: | 2024-02-19T00:00:00 |
| db: | NVD | id: | CVE-2024-22012 | date: | 2024-02-07T16:15:47.687 |