CVE-2024-39435: Command Injection
Published Sep 27, 2024
·Updated
In Logmanager service, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed.
Affected Software
16 affected components
All of the following
Any of the following
Google Android=12.0
Google Android=13.0
Google Android=14.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Sep 27, 2024
CVE Published
via MITRE·07:37 AM
Data Sourced
via MITRE·07:37 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-39435?
CVE-2024-39435 has a severity rating that indicates it allows for local privilege escalation without additional execution privileges.
2
How do I fix CVE-2024-39435?
To fix CVE-2024-39435, apply the latest security patches provided by the affected software vendor.
3
What systems are affected by CVE-2024-39435?
CVE-2024-39435 affects specific versions of Google Android, namely versions 12.0, 13.0, and 14.0.
4
What kind of attack can exploit CVE-2024-39435?
CVE-2024-39435 can be exploited for local escalation of privilege attacks.
5
Are there any workarounds for CVE-2024-39435?
Currently, there are no known workarounds for CVE-2024-39435 other than applying vendor patches.