DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Pixel Patchday April 2024
Advisory ansehen veröffentlicht 2024-04-02
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Google Pixel ausnutzen, um seine Privilegien zu erhöhen oder Informationen offenzulegen.
01
beschreibt (25)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-29783US | — | — | ||
In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privile… | ||||
| CVE-2024-29782US | — | — | ||
In tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… | ||||
| CVE-2024-29757US | — | — | ||
there is a possible permission bypass due to Debug certs being allowlisted. This could lead to local escalation of privilege with no additional execution privileges needed. User in… | ||||
| CVE-2024-29756US | — | — | ||
In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileg… | ||||
| CVE-2024-29755US | — | — | ||
In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privil… | ||||
| CVE-2024-29754US | — | — | ||
In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges… | ||||
| CVE-2024-29753US | — | — | ||
In tmu_set_control_temp_step of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… | ||||
| CVE-2024-29752US | — | — | ||
In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… | ||||
| CVE-2024-29751US | — | — | ||
In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead to local information disclosure with no additional execution… | ||||
| CVE-2024-29750US | — | — | ||
In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution pri… | ||||
| CVE-2024-29749US | — | — | ||
In tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… | ||||
| CVE-2024-29748US | high7.8OT kritisch | KEV | ||
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti… | ||||
| CVE-2024-29747US | — | — | ||
In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosure with no additional execution privileg… | ||||
| CVE-2024-29746US | — | — | ||
In lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution… | ||||
| CVE-2024-29745US | medium5.5OT kritisch | KEV | ||
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interacti… | ||||
| CVE-2024-29744US | — | — | ||
In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution priv… | ||||
| CVE-2024-29743US | — | — | ||
In tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution p… | ||||
| CVE-2024-29742US | — | — | ||
In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… | ||||
| CVE-2024-29741US | — | — | ||
In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution… | ||||
| CVE-2024-29740US | — | — | ||
In tmu_set_table of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution priv… | ||||
20 von 25 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan