CVE-2024-39438: Input Validation
Published Oct 9, 2024
·Updated
In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed.
Affected Software
15 affected components
All of the following
Any of the following
Google Android=13.0
Google Android=14.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Oct 9, 2024
CVE Published
via MITRE·06:43 AM
Data Sourced
via MITRE·06:43 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-39438?
CVE-2024-39438 has a high severity due to its potential for local escalation of privilege.
2
How do I fix CVE-2024-39438?
To fix CVE-2024-39438, ensure proper input validation on the linkturbonative service.
3
What can happen if CVE-2024-39438 is exploited?
Exploiting CVE-2024-39438 could allow an attacker to execute commands with system execution privileges.
4
Which versions of Google Android are affected by CVE-2024-39438?
Google Android versions 13.0 and 14.0 are affected by CVE-2024-39438.
5
Is there a specific hardware vulnerability associated with CVE-2024-39438?
CVE-2024-39438 is related to the linkturbonative service on software and not identified as a specific hardware vulnerability.