cve.bz

CVE-2024-0031

9.8 criticalEPSS 0.6%

Critical (9.8) in google android. EPSS 0.6% chance of exploitation in the next 30 days.

In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWEs
CWE-787, CWE-20
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON