CVE-2024-20024: Medium severity Google Android vulnerability
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541635; Issue ID: ALPS08541635.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-03-05 - Upgrade
Upgrade
flashcto a version that resolves this vulnerability.Patch ALPS08541635
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20024?
CVE-2024-20024 is a high severity vulnerability that allows local escalation of privilege.
How do I fix CVE-2024-20024?
To fix CVE-2024-20024, apply the security patch with ID ALPS08541635 as soon as it is available.
What is the risk of CVE-2024-20024?
The risk of CVE-2024-20024 includes potential unauthorized access to system-level privileges on affected devices.
Is user interaction required for exploiting CVE-2024-20024?
No, user interaction is not needed to exploit CVE-2024-20024.
Which software is affected by CVE-2024-20024?
CVE-2024-20024 affects devices running Google Android.