- Description
- In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- Source
- security@android.com
- NVD status
- Analyzed
- Products
- android
CVSS 3.1
- Type
- Secondary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-94
- Hype score
- Not currently trending
CVE-2024-43770 In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code ex… https://t.co/rKZ7dgKMXT
@CVEnew
22 Jan 2025
167 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
2/8 Critical RCE flaws (CVE-2024-43096, CVE-2024-43770) fixed in the 2025-01-01 patch level. Update now to protect against remote attacks! 🔐#AndroidPatch #Cybersecurity
@Eth1calHackrZ
12 Jan 2025
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
به تازگی اندرویدی در سال ۲۰۲۵ آپدیت و پچ امنیتی جدیدی را برای سیستم عامل خود منتشر نموده است .چندین آسیب پذیری از نوع RCE با کدهای شناسایی CVE-2024-43096 و CVE-2024-43770 و CVE-2024-43771 و CVE-2024-49747 برای اجزاء مختلف این سیستم عامل منتشر شده است. https://t.co/Poz3aKY03t ht
@AmirHossein_sec
12 Jan 2025
26 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
چندین آسیب پذیری از نوع RCE با کدهای شناسایی CVE-2024-43096 و CVE-2024-43770 و CVE-2024-43771 و CVE-2024-49747 برای اجزاء مختلف این سیستم عامل پرکاربرد که به هکرها امکان اجرای کد بدون نیاز به داشتن دسترسی بالا را می دهد ، منتشر شده است.
@cybernetic_cy
9 Jan 2025
80 Impressions
2 Retweets
3 Likes
0 Bookmarks
0 Replies
0 Quotes
【リンク集：1月8日〜9日のセキュリティ関連ニュース/記事】 ＜脆弱性＞ ・Android、2025年初のアップデートで深刻なコード実行の脆弱性を複数修正（CVE-2024-43096、CVE-2024-43770他） https://t.co/1qfzNIiGHm ・Chrome 131とFirefox… https://t.co/LBqDQETtLc
@MachinaRecord
9 Jan 2025
12 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Samsung Mobile Security Maintenance Release December 2024 https://t.co/fTDHkWhlXC Critical: CVE-2024-38408, CVE-2024-43096, CVE-2024-43770, CVE-2024-43771, CVE-2024-49747, CVE-2024-49748
@xvonfers
3 Dec 2024
1193 Impressions
1 Retweet
13 Likes
2 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F8FB8EE9-FC56-4D5E-AE55-A5967634740C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]