Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-32922

No fix known EPSS <1%CVSS 7.4

In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation.

Published 2024-06-13 · CVE record · OSV

Products: Google Android, google pixel