CVE-2024-29748

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-755CWE-280

Affected software

No affected versions have been published.

Timeline

Published
Apr 5, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Apr 4, 2024
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-297498.4In tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatioCVE-2024-29757.5A race condition was identified through which privilege escalation was possible in certain configurations.CVE-2024-297505.5In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disCVE-2024-297515.5In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead to local information CVE-2024-297527.8In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalCVE-2024-297537.7In tmu_set_control_temp_step of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalCVE-2024-297546.2In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure CVE-2024-297554.4In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to local information discloCVE-2024-297569.8In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privileCVE-2024-297577.3there is a possible permission bypass due to Debug certs being allowlisted. This could lead to local escalation of privilege with no additioCVE-2024-297587.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kienso Co-marquage service-public.Fr aCVE-2024-297596.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeople Calculated Fields Form allo
CVE-2024-29748: High severity, CVSS 7.8 | Vulnix