CVE-2024-29740: High severity Google Android vulnerability

Published Apr 5, 2024

Updated

In tmusettable of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected component

Google Android

Event History

Apr 3, 2024

News Published

via BleepingComputer·02:47 PM

News Published

via BleepingComputer·02:48 PM

Apr 5, 2024

CVE Published

via MITRE·08:02 PM

Data Sourced

via MITRE·08:02 PM

DescriptionWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Apr 5, 58713

Event

via FIRST·01:50 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-29740?

CVE-2024-29740 is classified as a high severity vulnerability due to the potential for local escalation of privilege.

How do I fix CVE-2024-29740?

To fix CVE-2024-29740, users should update their Google Android devices to the latest available security patch.

What does CVE-2024-29740 exploit?

CVE-2024-29740 exploits a missing bounds check in the tmu_set_table function in tmu.c, leading to out of bounds write scenarios.

Is user interaction required to exploit CVE-2024-29740?

No, user interaction is not needed for the exploitation of CVE-2024-29740.

Which devices are affected by CVE-2024-29740?

CVE-2024-29740 affects certain versions of Google Android on supported devices.