Platform Vendor Google Clockwork vulnerabilities

1 known vulnerability affecting platform/vendor_google_clockwork.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

UNKNOWN1

Vulnerabilities

Page 1 of 1

CVE-2024-40660UNKNOWN≥ 15-next:0, < 15-next:2024-11-012024-11-01

CVE-2024-40660 CVE-2024-40660: In setTransactionState of SurfaceFlinger In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.