PUB-A-315969497

See a problem?

Import Source

https://storage.googleapis.com/android-osv/PUB-A-315969497.json

JSON Data

https://api.osv.dev/v1/vulns/PUB-A-315969497

Aliases

A-315969497
CVE-2024-32911

Published

2024-06-01T00:00:00Z

Modified

2024-08-29T06:58:09.940869Z

Summary

rrc security mode command with prohibited IE accepted

Details

There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2024-06-01

Affected packages

Android / :unknown:

Package

Name: :unknown:

Affected ranges

Type: ECOSYSTEM
Events: Introduced

Pixel-family specific:0

Fixed

Pixel-family specific:2024-06-05

Affected versions

Other

Pixel-family specific

Ecosystem specific

{
    "spl": "2024-06-05",
    "severity": "High",
    "types": [
        "EoP"
    ]
}