CVE-2024-27223

MediumCVSS 5.1/10Last modified Jun 17, 2026

Description

In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure after authenticating the cell connection with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 5.1/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Mar 11, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-272247.8In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priviCVE-2024-272254.4In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informCVE-2024-272268.4In tmu_config_gov_params of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of CVE-2024-272279.8A malicious DNS response can trigger a number of OOB reads, writes, and other memory issuesCVE-2024-272289.8there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional executionCVE-2024-272297.5In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check. This could lCVE-2024-27237.5SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exploitation of this vuCVE-2024-272305.1In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds checCVE-2024-272315.9In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disCVE-2024-272325.5In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to local information disclCVE-2024-272337.8In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. This could lead to local escalation of CVE-2024-272345.9In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl
CVE-2024-27223: Medium severity, CVSS 5.1 | Vulnix