CERT-In Vulnerability Note
CIVN-2024-0319
Multiple Vulnerabilities in Google Android
Original Issue Date:October 11, 2024
Severity Rating: HIGH
Software Affected
- Android versions 12, 12L, 13, 14, 15.
Overview
Multiple vulnerabilities have been reported in Android which could be exploited by an attacker to execute arbitrary code on the targeted system.
Description
These vulnerabilities exist in Android due to flaws in the Framework, System, Google Play system updates (ART and Wi-Fi subcomponent), Imagination Technologies components, MediaTek components, Qualcomm components and Qualcomm closed-source components.
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code on the targeted system.
Solution
Apply appropriate updates when made available by the respective OEMs.
https://source.android.com/docs/security/bulletin/2024-10-01
Vendor Information
Android
https://source.android.com/docs/security/bulletin/2024-10-01
References
Android
https://source.android.com/docs/security/bulletin/2024-10-01
CVE Name
CVE-2024-20092
CVE-2024-23369
CVE-2024-38399
CVE-2024-33069
CVE-2024-33049
CVE-2024-20094
CVE-2024-20093
CVE-2024-20091
CVE-2024-20090
CVE-2024-34732
CVE-2024-20103
CVE-2024-20101
CVE-2024-20100
CVE-2024-40670
CVE-2024-40669
CVE-2024-40651
CVE-2024-40649
CVE-2024-34748
CVE-2024-34733
CVE-2024-40676
CVE-2024-40675
CVE-2024-40677
CVE-2024-40673
CVE-2024-40674
CVE-2024-40672
CVE-2024-0044
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in Phone: +91-11-22902657
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India
|