CVE-2024-0040

Katalog CVE

CVSS 7.5 · High EPSS 2,0%

Kerentanan Out-of-bounds Write pada google android. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Rincian

Terbit di NVD

16 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write
CWE-122: Heap-based Buffer Overflow

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 79,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://source.android.com/security/bulletin/2024-02-01 patch · advisory vendor
• https://android.googlesource.com/platform/frameworks/av/+/2ca6c27dc0336fd98f47cfb96dc514efa98e8864 mailing list · patch