7.8

CVE-2024-47013

EPSS 0.04%
Veröffentlicht 25.10.2024 11:15:16
Zuletzt bearbeitet 24.07.2025 15:18:26
Quelle dsap-vuln-management@google.co
CVE-Watchlists
Login
Unerledigt
Login

In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version-

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.113

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://source.android.com/security/bulletin/pixel/2024-10-01

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-47013

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-47013

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-47013

EUVD