CVE-2024-44101

EPSS 0.22%
Published 25.10.2024 11:15:16
Last modified 28.10.2024 13:59:28
Source dsap-vuln-management@google.co
Teams watchlist Login
Open Login

there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Google ≫ Android Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.22%	0.45

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://source.android.com/security/bulletin/pixel/2024-10-01

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-44101

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-44101

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-44101

EUVD