Platform Build Soong vulnerabilities
3 known vulnerabilities affecting platform/build_soong.
Total CVEs
3
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
UNKNOWN3
Vulnerabilities
Page 1 of 1
CVE-2024-32896UNKNOWNKEV≥ 14-next:0, < 14-next:2024-06-052024-06-01
CVE-2024-32896 CVE-2024-32896: there is a possible way to bypass due to a logic error in the code
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
osv
CVE-2023-21113UNKNOWN≥ 13:0, < 13:2024-06-012024-06-01
CVE-2023-21113 CVE-2023-21113: In multiple locations, there is a possible permission bypass due to a confused deputy
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
osv
CVE-2023-21084UNKNOWN≥ 13:0, < 13:2023-04-012023-04-01
CVE-2023-21084 CVE-2023-21084: In buildPropFile of filesystem
In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
osv