Veille CVE
CVE-2024-29745
5.5 Moyenne Exploitée activementCatalogue CISA KEV — Android Pixel Information Disclosure Vulnerability
Ajoutée le 04/04/2024 · Échéance de correction (agences US) : 25/04/2024
Action requise : Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 5.5 Moyenne | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | 5.5 Moyenne | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Faiblesses (CWE)
Références
- https://source.android.com/security/bulletin/pixel/2024-04-01 Vendor Advisory
- https://source.android.com/security/bulletin/pixel/2024-04-01 Vendor Advisory
- https://twitter.com/GrapheneOS/status/1775306481622995226 Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29745 US Government Resource