CVE-2024-39431: High severity Google Android vulnerability
In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2024-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39431?
CVE-2024-39431 is classified as a denial of service vulnerability that can be exploited remotely.
How do I fix CVE-2024-39431?
The recommended fix for CVE-2024-39431 is to update affected Android devices to the latest security patches provided by Google.
Which Android versions are affected by CVE-2024-39431?
CVE-2024-39431 affects Android versions 12.0, 13.0, and 14.0.
What are the potential impacts of CVE-2024-39431?
Exploitation of CVE-2024-39431 could lead to a remote denial of service, disrupting the affected system's operation.
Who is impacted by CVE-2024-39431?
Users of vulnerable Android devices operating versions 12.0, 13.0, and 14.0 may be impacted by CVE-2024-39431.