Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-32921

No fix known EPSS <1%CVSS 7.4

In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Published 2024-06-13 · CVE record · OSV

Products: Google Android, google pixel