CVE-2024-22004: Unchecked length in Trusted Application on Google Nest Wifi Pro, leading to out of bounds read
Published Apr 5, 2024
·Updated
Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application
Affected Software
7 affected components
Google Nest WiFi Pro
All of the following
Google Nest Wifi Pro Firmware=24r1
Google Nest WiFi Pro
All of the following
Google Nest Wifi Point Firmware=24r1
Google Nest Wifi Point
All of the following
Google Nest Wifi Router Firmware=24r1
Google Nest Wifi Router
Event History
Apr 5, 2024
CVE Published
via MITRE·06:03 PM
Data Sourced
via MITRE·06:03 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-22004?
CVE-2024-22004 has been rated as a significant vulnerability due to its potential to leak secure memory from a Trusted Application.
2
How do I fix CVE-2024-22004?
To fix CVE-2024-22004, ensure to update your Google Nest Wifi Pro to the latest firmware version provided by Google.
3
What systems are affected by CVE-2024-22004?
CVE-2024-22004 affects the Google Nest Wifi Pro running on nonsecure Linux operating systems.
4
What type of attacker could exploit CVE-2024-22004?
An attacker with privileged access on a vulnerable Linux Nonsecure operating system can exploit CVE-2024-22004.
5
What does CVE-2024-22004 exploit?
CVE-2024-22004 exploits a length check vulnerability that can lead to the leakage of secure memory.