In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/pixel/2024-06-01 | Vendor Advisory |
https://source.android.com/security/bulletin/pixel/2024-06-01 | Vendor Advisory |
Configurations
History
22 Jul 2025, 21:56
Type | Values Removed | Values Added |
---|---|---|
First Time |
Google
Google android |
|
References | () https://source.android.com/security/bulletin/pixel/2024-06-01 - Vendor Advisory | |
CPE | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* |
Information
Published : 2024-06-13 21:15
Updated : 2025-07-22 21:56
NVD link : CVE-2024-32919
Mitre link : CVE-2024-32919
CVE.ORG link : CVE-2024-32919
JSON object : View
Products Affected
- android
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')