In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://source.android.com/security/bulletin/2024-11-01 |
History
Tue, 17 Dec 2024 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Google
Google android |
|
Weaknesses | NVD-CWE-noinfo | |
CPEs | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* | |
Vendors & Products |
Google
Google android |
Fri, 15 Nov 2024 22:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Imaginationtech
Imaginationtech powervr-gpu |
|
CPEs | cpe:2.3:h:imaginationtech:powervr-gpu:-:*:*:*:*:*:*:* | |
Vendors & Products |
Imaginationtech
Imaginationtech powervr-gpu |
|
Metrics |
cvssV3_1
|
Wed, 13 Nov 2024 17:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2024-11-13T17:13:19.522Z
Updated: 2024-11-15T21:18:18.327Z
Reserved: 2024-03-29T20:12:57.129Z
Link: CVE-2024-31337
Vulnrichment
Updated: 2024-11-15T21:18:04.993Z
NVD
Status : Analyzed
Published: 2024-11-13T18:15:20.167
Modified: 2024-12-17T19:50:20.327
Link: CVE-2024-31337
Redhat
No data.