Lucene search
Google_DevicesVULNRICHMENT:CVE-2024-29780HistoryJun 13, 2024 - 9:01 p.m.
CVE-2024-29780
2024-06-1321:01:55
Google_Devices
github.com
5
uninitialized stack data
trusty/user/base/lib/hwbcc/client
local information disclosure
no additional execution privileges
user interaction
AI Score
6.5
Confidence
High
EPSS
0
Percentile
9.0%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
In hwbcc_ns_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CNA Affected
[
{
"vendor": "Google",
"product": "Android",
"versions": [
{
"status": "affected",
"version": "Android kernel"
}
],
"defaultStatus": "unaffected"
}
]Related
cvelist
cvelist
CVE-2024-29780
2024-06-13 21:01:55
nvd
nvd
CVE-2024-29780
2024-06-13 21:15:51
cve
cve
CVE-2024-29780
2024-06-13 21:15:51
AI Score
6.5
Confidence
High
EPSS
0
Percentile
9.0%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-29780