CVE-2024-32919

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

No affected versions have been published.

Timeline

Published: Jun 13, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-32928.2A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parame CVE-2024-329207.1In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati CVE-2024-329217.4In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds check. This could lea CVE-2024-329227.4In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code. Thi CVE-2024-329234.0there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of service with no additio CVE-2024-329247.5In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the code. This could lead CVE-2024-329258.8In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remo CVE-2024-329265.5there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure with CVE-2024-329277.8In sendDeviceState_1_6 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of p CVE-2024-329285.9The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential man CVE-2024-329298.1In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege CVE-2024-32938.8The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to blind SQL Injection via the rtmedia_gallery shortcod