CVE-2024-43077

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jan 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-43088.1SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL q CVE-2024-430807.8In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to CVE-2024-430817.8In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the cod CVE-2024-430825.5In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy. This could lead to CVE-2024-430835.5In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion. This could lead to CVE-2024-430845.5In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information di CVE-2024-430857.8In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to CVE-2024-430865.5In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a CVE-2024-430877.8In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in t CVE-2024-430887.8In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the de CVE-2024-430897.8In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could le CVE-2024-43098.1SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL q