Unchecked length in Trusted Application on Google Nest Wifi Pro, leading to out of bounds read

CVE-2024-22004

What is CVE-2024-22004?

A memory leak vulnerability exists within trusted applications on Linux Nonsecure operating systems due to improper length checks. An attacker with privileged access could exploit this flaw to access and leak sensitive secure memory regions of the trusted application, potentially leading to unauthorized disclosures of critical information. This vulnerability raises significant concerns about memory integrity and the security posture of affected systems.

References