ASB-A-363073314

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-363073314.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-363073314

Aliases

A-363073314
CVE-2024-43704

Published

2025-01-01T00:00:00Z

Modified

2025-01-17T16:12:29.758098Z

Summary

[none]

Details

In PVRSRVAcquireProcessHandleBase of handle.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2025-01-01

Affected packages

Android / :unknown:

Package

Name: :unknown:

Affected ranges

Type: ECOSYSTEM
Events: Introduced

SoCVersion:0

Fixed

SoCVersion:2025-01-05

Affected versions

Other

SoCVersion

Ecosystem specific

{
    "spl": "2025-01-05",
    "severity": "High",
    "types": [
        "EoP"
    ]
}