Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-47033

No fix known EPSS <1%CVSS 7.4

In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Published 2024-10-25 · CVE record · OSV

Products: Google Android, google pixel