CVE-2024-32900

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege from hal_camera_default SELinux label with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416 CWE-667

Affected software

No affected versions have been published.

Timeline

Published: Jun 13, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-329017.8In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local esc CVE-2024-329027.5Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed CVE-2024-329037.8In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead CVE-2024-329044.7In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This cou CVE-2024-329059.8In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to re CVE-2024-329067.8In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no ad CVE-2024-329077.8In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of pri CVE-2024-329087.8In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privi CVE-2024-329097.8In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of pri CVE-2024-32917.8When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not CVE-2024-329105.5In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. CVE-2024-329119.8There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of privilege with no additio