Possible Use-After-Free Vulnerability in Devicemem_Server.c Could Lead to Local Escalation of Privilege
CVE-2024-23716

7HIGH

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
11 September 2024

What is CVE-2024-23716?

A use-after-free vulnerability exists in the DeviceMem server of Android due to a race condition in the devicemem_server.c file. This flaw allows for local privilege escalation within the kernel, necessitating no additional execution privileges for exploitation. The vulnerability can be exploited without user interaction, posing a significant risk to device security if not addressed.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Android Android SoC

References

https://source.android.com/security/bulletin/2024-09-01

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.