mickmick.net

Android Multiple Vulnerabilities

Release Date: 5 Nov 2024

RISK: Medium Risk

TYPE: Operating Systems - Mobile & Apps

Multiple vulnerabilities were identified in Android. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, denial of service condition, elevation of privilege and remote code execution on the targeted system.

 

Note:

There are indications that CVE-2024-43093 may be under limited, targeted exploitation. For CVE-2024-43093, the vulnerability could lead to local escalation of privilege. A local application is needed for exploitation. Hence, the risk level is rated as Medium Risk.

---

Impact

• Denial of Service
• Elevation of Privilege
• Remote Code Execution
• Information Disclosure

---

System / Technologies affected

• Android security patch level prior to 2024-11-05

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Apply fixes issued by the vendor:
  https://source.android.com/docs/security/bulletin/2024-11-01

---

Vulnerability Identifier

• CVE-2024-29779
• CVE-2024-34719
• CVE-2024-36978
• CVE-2024-40660
• CVE-2024-40661
• CVE-2024-43080
• CVE-2024-43081
• CVE-2024-43082
• CVE-2024-43083
• CVE-2024-43084
• CVE-2024-43085
• CVE-2024-43086
• CVE-2024-43087
• CVE-2024-43088
• CVE-2024-43089
• CVE-2024-43090
• CVE-2024-43091
• CVE-2024-43093
• CVE-2024-46740

---

Source

• Android

---

Related Link

• https://source.android.com/docs/security/bulletin/2024-11-01