CVE-2024-39431 — Out-of-bounds Write in Technologies CO LTD Sc7731e Sc9832e Sc9863a T310 T606 T612 T616 T610 T618 T760 T770 T820 S8000

CWE-787 — Out-of-bounds Write5 documents4 sources
Severity
4.5MEDIUMNVD
EPSS
1.1%
top 22.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Unisoc Technologies CO LTD Sc7731e Sc9832e Sc9863a T310 T606 T612 T616 T610 T618 T760 T770 T820 S8000Google Android
Timeline
PublishedSep 27
Latest updateDec 16

Description

In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.9 | Impact: 3.6

Affected Packages3 packages

▶NVDgoogle/android12.0, 13.0, 14.0+2

🔴Vulnerability Details

1
GHSA
GHSA-jv5j-9qxg-rrh2: In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check↗2024-09-27
▶

📋Vendor Advisories

1
Android
CVE-2024-39431: Modem↗2024-09-01
▶

🕵️Threat Intelligence

2
Securelist
A vehicle's head unit hacked via its modem↗2025-12-16
▶
Securelist
God Mode On: how we attacked a vehicle’s head unit modem↗2025-12-16
▶