CVE-2024-39437: Input Validation
Published Oct 9, 2024
·Updated
In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed.
Affected Software
15 affected components
All of the following
Any of the following
Google Android=13.0
Google Android=14.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Oct 9, 2024
CVE Published
via MITRE·06:43 AM
Data Sourced
via MITRE·06:43 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-39437?
CVE-2024-39437 is rated as a high-severity vulnerability due to its potential for command injection and local privilege escalation.
2
How do I fix CVE-2024-39437?
To fix CVE-2024-39437, ensure proper input validation and sanitization in the linkturbonative service.
3
What systems are affected by CVE-2024-39437?
CVE-2024-39437 affects Google Android versions 13.0 and 14.0.
4
What is the impact of CVE-2024-39437?
The impact of CVE-2024-39437 can include local escalation of privileges, allowing attackers to execute commands with system-level permissions.
5
Is there an official response to CVE-2024-39437?
Yes, Unisoc has acknowledged CVE-2024-39437 and published an announcement regarding the vulnerability.