Skip to content

Commit

Permalink
12 changes (12 new | 0 updated):
Browse files Browse the repository at this point in the history 
      - 12 new CVEs:  CVE-2024-11624, CVE-2024-47032, CVE-2024-53833, CVE-2024-53834, CVE-2024-53835, CVE-2024-53836, CVE-2024-53837, CVE-2024-53838, CVE-2024-53839, CVE-2024-53840, CVE-2024-53841, CVE-2024-53842
      - 0 updated CVEs:
  • Loading branch information
cvelistV5 Github Action committed Jan 3, 2025
1 parent c0e801b commit af94182
Show file tree
Hide file tree
Showing 14 changed files with 808 additions and 120 deletions.
56 changes: 56 additions & 0 deletions cves/2024/11xxx/CVE-2024-11624.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-11624",
"assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222",
"state": "PUBLISHED",
"assignerShortName": "Google_Devices",
"dateReserved": "2024-11-22T15:27:09.885Z",
"datePublished": "2025-01-03T03:28:22.231Z",
"dateUpdated": "2025-01-03T03:28:22.231Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83238938-5644-45f0-9007-c0392bcf6222",
"shortName": "Google_Devices",
"dateUpdated": "2025-01-03T03:28:22.231Z"
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Elevation of privilege"
}
]
}
],
"affected": [
{
"vendor": "Google",
"product": "Android",
"versions": [
{
"version": "Android kernel",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/pixel/2024-12-01"
}
]
}
}
}
56 changes: 56 additions & 0 deletions cves/2024/47xxx/CVE-2024-47032.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-47032",
"assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222",
"state": "PUBLISHED",
"assignerShortName": "Google_Devices",
"dateReserved": "2024-09-16T19:21:19.199Z",
"datePublished": "2025-01-03T03:28:22.448Z",
"dateUpdated": "2025-01-03T03:28:22.448Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83238938-5644-45f0-9007-c0392bcf6222",
"shortName": "Google_Devices",
"dateUpdated": "2025-01-03T03:28:22.448Z"
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Elevation of privilege"
}
]
}
],
"affected": [
{
"vendor": "Google",
"product": "Android",
"versions": [
{
"version": "Android kernel",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/pixel/2024-12-01"
}
]
}
}
}
56 changes: 56 additions & 0 deletions cves/2024/53xxx/CVE-2024-53833.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-53833",
"assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222",
"state": "PUBLISHED",
"assignerShortName": "Google_Devices",
"dateReserved": "2024-11-22T15:11:38.317Z",
"datePublished": "2025-01-03T03:28:24.450Z",
"dateUpdated": "2025-01-03T03:28:24.450Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83238938-5644-45f0-9007-c0392bcf6222",
"shortName": "Google_Devices",
"dateUpdated": "2025-01-03T03:28:24.450Z"
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Elevation of privilege"
}
]
}
],
"affected": [
{
"vendor": "Google",
"product": "Android",
"versions": [
{
"version": "Android kernel",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/pixel/2024-12-01"
}
]
}
}
}
56 changes: 56 additions & 0 deletions cves/2024/53xxx/CVE-2024-53834.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-53834",
"assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222",
"state": "PUBLISHED",
"assignerShortName": "Google_Devices",
"dateReserved": "2024-11-22T15:11:38.317Z",
"datePublished": "2025-01-03T03:28:24.594Z",
"dateUpdated": "2025-01-03T03:28:24.594Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83238938-5644-45f0-9007-c0392bcf6222",
"shortName": "Google_Devices",
"dateUpdated": "2025-01-03T03:28:24.594Z"
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Information disclosure"
}
]
}
],
"affected": [
{
"vendor": "Google",
"product": "Android",
"versions": [
{
"version": "Android kernel",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/pixel/2024-12-01"
}
]
}
}
}
56 changes: 56 additions & 0 deletions cves/2024/53xxx/CVE-2024-53835.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-53835",
"assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222",
"state": "PUBLISHED",
"assignerShortName": "Google_Devices",
"dateReserved": "2024-11-22T15:11:38.317Z",
"datePublished": "2025-01-03T03:28:24.746Z",
"dateUpdated": "2025-01-03T03:28:24.746Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83238938-5644-45f0-9007-c0392bcf6222",
"shortName": "Google_Devices",
"dateUpdated": "2025-01-03T03:28:24.746Z"
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Elevation of privilege"
}
]
}
],
"affected": [
{
"vendor": "Google",
"product": "Android",
"versions": [
{
"version": "Android kernel",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/pixel/2024-12-01"
}
]
}
}
}
56 changes: 56 additions & 0 deletions cves/2024/53xxx/CVE-2024-53836.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-53836",
"assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222",
"state": "PUBLISHED",
"assignerShortName": "Google_Devices",
"dateReserved": "2024-11-22T15:11:38.317Z",
"datePublished": "2025-01-03T03:28:24.888Z",
"dateUpdated": "2025-01-03T03:28:24.888Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83238938-5644-45f0-9007-c0392bcf6222",
"shortName": "Google_Devices",
"dateUpdated": "2025-01-03T03:28:24.888Z"
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Elevation of privilege"
}
]
}
],
"affected": [
{
"vendor": "Google",
"product": "Android",
"versions": [
{
"version": "Android kernel",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "In wbrc_bt_dev_write of wb_regon_coordinator.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation."
}
],
"references": [
{
"url": "https://source.android.com/security/bulletin/pixel/2024-12-01"
}
]
}
}
}
Loading

0 comments on commit af94182

Please sign in to comment.