In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
References
| Link | Resource |
|---|---|
| https://source.android.com/security/bulletin/2024-09-01 | Vendor Advisory |
Configurations
History
17 Dec 2024, 19:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://source.android.com/security/bulletin/2024-09-01 - Vendor Advisory | |
| CPE | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* | |
| First Time |
Google
Google android |
|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
13 Sep 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. |
12 Sep 2024, 14:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.4 |
11 Sep 2024, 16:26
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
11 Sep 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Imagination PowerVR-GPU in Android before 2024-09-05 has a High Severity Vulnerability, aka A-337949672. |
11 Sep 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-11 00:15
Updated : 2024-12-17 19:08
NVD link : CVE-2024-31336
Mitre link : CVE-2024-31336
CVE.ORG link : CVE-2024-31336
JSON object : View
Products Affected
- android
CWE