Analysis Summary

CVE-2024-34742 CVSS:7.5

Google Android is vulnerable to a denial of service, caused by a logic error in the code in shouldWrite of OwnersData.java. By sending a specially crafted request, a local attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-34727 CVSS:7.5

Google Android could allow a remote attacker to obtain sensitive information, caused by a heap buffer overflow in sdpu_compare_uuid_with_attr of sdp_utils.cc. By sending a specially crafted request, a remote attacker could exploit this vulnerability to obtain sensitive information.

Impact

• Denial of Service
• Information Disclosure

Indicators of Compromise

CVE

• CVE-2024-34742
• CVE-2024-34727

Affected Vendors

Remediation

Upgrade to the latest version of Android, available from the Google Website.

Google Website