CVE-2024-34726 — Operator Precedence Logic Error in Google Android

CWE-783 — Operator Precedence Logic Error4 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 88.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedJul 9

Description

In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5google/androidAndroid SoC

🔴Vulnerability Details

2
GHSA
GHSA-52ch-6mpj-gw76: In PVRSRV_MMap of pvr_bridge_k↗2024-07-09
▶
OSV
CVE-2024-34726: In PVRSRV_MMap of pvr_bridge_k↗2024-07-01
▶

📋Vendor Advisories

1
Android
CVE-2024-34726: PowerVR-GPU↗2024-07-01
▶