Analysis Summary

CVE-2024-47034 CVSS:5.1

there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2024-47030 CVSS:6.2

Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component.

CVE-2024-47025 CVSS:4

Google Android could allow a local attacker to obtain sensitive information, caused by a logic error in the code in ppmp_protect_buf of drm_fw.c. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain sensitive information.

Impact

• Information Disclosure

Indicators of Compromise

CVE

• CVE-2024-47034
• CVE-2024-47030
• CVE-2024-47025

Affected Vendors

Remediation

Upgrade to the latest version of Android, available from the Google Website.

CVE-2024-47034

CVE-2024-47030

CVE-2024-47025