CVE-2024-22006

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Mar 11, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-220076.2In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disCVE-2024-220087.8In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatCVE-2024-220097.1In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wiCVE-2024-22014.7A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak CVE-2024-220105.5In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dCVE-2024-220117.5In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead CVE-2024-220127.8there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional eCVE-2024-220135.3U-Boot environment is read from unauthenticated partition.CVE-2024-220148.8An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via SymbolCVE-2024-220156.5Improper input validation for some Intel(R) DLB driver software before version 8.5.0 may allow an authenticated user to potentially denial oCVE-2024-220167.8In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may CVE-2024-220177.3setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to perform
CVE-2024-22006: Medium severity, CVSS 5.3 | Vulnix