CVE-2024-32911 — Use of a Broken or Risky Cryptographic Algorithm in Google Android

CWE-327 — Use of a Broken or Risky Cryptographic AlgorithmCWE-347 — Improper Verification of Cryptographic Signature3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
1.9%
top 16.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedJun 13

Description

There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶CVEListV5google/androidAndroid kernel

🔴Vulnerability Details

2
GHSA
GHSA-h33q-qggg-pqmj: There is a possible escalation of privilege due to improperly used crypto↗2024-06-13
▶
OSV
CVE-2024-32911: There is a possible escalation of privilege due to improperly used crypto↗2024-06-01
▶