CVE-2024-22007
published 2024-03-11CVE-2024-22007: In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no…
PriorityP427medium6.2CVSS 3.1
AVLACLPRNUINSUCHINAN
EPSS
0.09%
0.7th percentile
In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5r32-8c3f-2rf4: In constraint_check of fvp
ghsa_unreviewed·2024-03-11
CVE-2024-22007 [MEDIUM] CWE-125 GHSA-5r32-8c3f-2rf4: In constraint_check of fvp
In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
OSV
CVE-2024-22007: In constraint_check of fvp
osv·2024-03-01
CVE-2024-22007 CVE-2024-22007: In constraint_check of fvp
In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-03-11
Published