Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-44098

No fix known EPSS <1%CVSS 7.4

In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Published 2024-10-25 · CVE record · OSV

Products: Google Android, google pixel