CVE-2024-32896

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-670CWE-783

Affected software

No affected versions have been published.

Timeline

Published
Jun 13, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Jun 13, 2024
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-328975.9In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds CVE-2024-328984.7In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. ThCVE-2024-328997.0In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition. This could CVE-2024-32908.2A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters aCVE-2024-329007.8In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of priCVE-2024-329017.8In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escCVE-2024-329027.5Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed CVE-2024-329037.8In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead CVE-2024-329044.7In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This couCVE-2024-329059.8In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to reCVE-2024-329067.8In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no adCVE-2024-329077.8In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of pri