CVE-2024-29746

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

In lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Apr 5, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-297475.9In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosuCVE-2024-297487.8there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional exeCVE-2024-297498.4In tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatioCVE-2024-29757.5A race condition was identified through which privilege escalation was possible in certain configurations.CVE-2024-297505.5In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disCVE-2024-297515.5In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead to local information CVE-2024-297527.8In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalCVE-2024-297537.7In tmu_set_control_temp_step of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalCVE-2024-297546.2In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure CVE-2024-297554.4In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to local information discloCVE-2024-297569.8In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privileCVE-2024-297577.3there is a possible permission bypass due to Debug certs being allowlisted. This could lead to local escalation of privilege with no additio
CVE-2024-29746: High severity, CVSS 8.4 | Vulnix