CVE-2024-32899

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362 CWE-269

Affected software

Vendor	Product	Versions
Google	Android	Android kernel
google	android_kernel	android_kernel

References

https://source.android.com/security/bulletin/pixel/2024-06-01Vendor Advisory
https://source.android.com/security/bulletin/pixel/2024-06-01Vendor Advisory

Timeline

Published: Jun 13, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-32908.2A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters a CVE-2024-329007.8In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of pri CVE-2024-329017.8In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc CVE-2024-329027.5Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed CVE-2024-329037.8In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead CVE-2024-329044.7In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This cou CVE-2024-329059.8In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to re CVE-2024-329067.8In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no ad CVE-2024-329077.8In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of pri CVE-2024-329087.8In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privi CVE-2024-329097.8In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of pri CVE-2024-32917.8When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not