CVE-2024-39429: Medium severity android vulnerability
Published Jul 1, 2024
·Updated
In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Affected Software
10 affected components
All of the following
Google Android=12.0
Any of the following
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
Event History
Jul 1, 2024
CVE Published
via MITRE·08:40 AM
Data Sourced
via MITRE·08:40 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-39429?
CVE-2024-39429 has a high severity due to its potential to cause local denial of service.
2
How do I fix CVE-2024-39429?
To fix CVE-2024-39429, apply the latest security updates provided by your device manufacturer.
3
What causes CVE-2024-39429?
CVE-2024-39429 is caused by a missing bounds check in the faceid service.
4
Which versions of Android are affected by CVE-2024-39429?
CVE-2024-39429 affects Google Android version 12.0.
5
Is additional execution privileges needed to exploit CVE-2024-39429?
No, no additional execution privileges are needed to exploit CVE-2024-39429.