In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/pixel/2024-06-01 | Vendor Advisory |
https://source.android.com/security/bulletin/pixel/2024-06-01 | Vendor Advisory |
Configurations
History
22 Jul 2025, 21:56
Type | Values Removed | Values Added |
---|---|---|
References | () https://source.android.com/security/bulletin/pixel/2024-06-01 - Vendor Advisory | |
CPE | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* | |
First Time |
Google
Google android |
21 Nov 2024, 09:16
Type | Values Removed | Values Added |
---|---|---|
References | () https://source.android.com/security/bulletin/pixel/2024-06-01 - |
01 Aug 2024, 13:51
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
CWE | CWE-843 |
17 Jun 2024, 12:43
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
13 Jun 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-13 21:15
Updated : 2025-07-22 21:56
NVD link : CVE-2024-32919
Mitre link : CVE-2024-32919
CVE.ORG link : CVE-2024-32919
JSON object : View
Products Affected
- android
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')