CVE-2024-34731
In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Google Android
14, 13, 12L, 12
References 6
android.googlesource.com
- platform/hardware/interfaces/+/0ff19d1f89614fce9454fb415bcbfcbcf3caf76e
- platform/frameworks/av/+/4b68b00993849b6a7f0e6d075bc2c8bb2e184e61
- platform/hardware/interfaces/+/d63d09261806f7f1aa01406867f2a9e169356fca
- platform/system/security/+/d3805312d73433e34ef69a645b553a2969c5dc93
- platform/system/nfc/+/1037992b9abcde1e3560bd895f62644a68563b3d