CVE-2024-39434

MEDIUM EPSS 0.2%

Published Sep 27, 20241y ago · Modified Jun 17, 20261w ago

4.4 CVSS 3.1

Medium

Published Sep 27, 2024 1y ago

Last Modified Jun 17, 2026 1w ago

Description

In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

CVSS Details

Base Score

4.4

Exploitability

0.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required High

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

0.2% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-125 Out-of-bounds Read Memory Safety

Affected Products 11

Vendor	Product	Version	Range
google	android	13.0	any
google	android	14.0	any
unisoc	s8000	*	any
unisoc	t606	*	any
unisoc	t610	*	any
unisoc	t612	*	any
unisoc	t616	*	any
unisoc	t618	*	any
unisoc	t760	*	any
unisoc	t770	*	any
unisoc	t820	*	any

References 1

unisoc.com https://www.unisoc.com/en_us/secy/announcementDetail/1830802995705610241

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.