PT-2024-26138
CVE-2024-34724
·
Published
2024-07-09
·
Updated
2024-12-17
Description by
CVSS 3.1
7.0
HighMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Android versions prior to the fixed version
Description
The issue is related to a possible arbitrary code execution due to a race condition in the
UnrefAndMaybeDestroy function of pmr.c. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Recommendations
For Android versions prior to the fixed version, update to the latest version to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾