ID
VAR-202410-2013
CVE
CVE-2024-47012
TITLE
Google of Android Out-of-bounds write vulnerability in
Trust: 0.8
DESCRIPTION
In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Google of Android Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Google Pixel is a smartphone produced by Google in the United States. Google Pixel has a buffer overflow vulnerability. The vulnerability is caused by incorrect boundary checking in mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c. Attackers can exploit this vulnerability to cause out-of-bounds write
Trust: 2.16
IOT TAXONOMY
| category: | ['IoT'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | model: | android | scope: | eq | version: | - | Trust: 1.8 | |
| vendor: | model: | android | scope: | - | version: | - | Trust: 0.8 | |
| vendor: | model: | pixel | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-276 | Trust: 1.0 |
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | Inappropriate default permissions (CWE-276) [ others ] | Trust: 0.8 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
PATCH
| title: | Patch for Google Pixel mm_GmmPduCodec.c file buffer overflow vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/611796 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-47012 | Trust: 3.2 |
| db: | JVNDB | id: | JVNDB-2024-011379 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2024-45884 | Trust: 0.6 |
REFERENCES
| url: | https://source.android.com/security/bulletin/pixel/2024-10-01 | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-47012 | Trust: 1.4 |
SOURCES
| db: | CNVD | id: | CNVD-2024-45884 |
| db: | JVNDB | id: | JVNDB-2024-011379 |
| db: | NVD | id: | CVE-2024-47012 |
LAST UPDATE DATE
2024-11-29T23:04:10.282000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-45884 | date: | 2024-11-25T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-011379 | date: | 2024-10-29T03:06:00 |
| db: | NVD | id: | CVE-2024-47012 | date: | 2024-10-28T13:58:44.983 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-45884 | date: | 2024-11-08T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-011379 | date: | 2024-10-29T00:00:00 |
| db: | NVD | id: | CVE-2024-47012 | date: | 2024-10-25T11:15:16.403 |