{"id":"CVE-2024-44101","state":"PUBLISHED","title":"there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional execution privileges nee","description":"there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","publishedAt":"2024-10-25T10:34:03.747Z","updatedAt":"2024-10-25T18:41:53.980Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"Google_Devices","products":["Google Android"],"affected":[{"vendor":"Google","product":"Android","defaultStatus":"unaffected","versions":[{"version":"Android kernel","status":"affected"}]}],"references":["https://source.android.com/security/bulletin/pixel/2024-10-01"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T20:07:47.831Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/44xxx/CVE-2024-44101.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-44101","state":"PUBLISHED","datePublished":"2024-10-25T10:34:03.747Z","dateUpdated":"2024-10-25T18:41:53.980Z","assignerShortName":"Google_Devices","assignerOrgId":"83238938-5644-45f0-9007-c0392bcf6222","dateReserved":"2024-08-19T16:32:38.651Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation."}],"affected":[{"vendor":"Google","product":"Android","defaultStatus":"unaffected","versions":[{"version":"Android kernel","status":"affected"}]}],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2024-10-01"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Denial of service"}]}],"providerMetadata":{"shortName":"Google_Devices","orgId":"83238938-5644-45f0-9007-c0392bcf6222","dateUpdated":"2024-10-25T10:34:03.747Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"google","product":"android","defaultStatus":"unknown","versions":[{"version":"android_kernel","status":"affected"}],"cpes":["cpe:2.3:o:google:android:-:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-10-25T18:40:03.594911Z","id":"CVE-2024-44101","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","type":"CWE","lang":"en","description":"CWE-476 NULL Pointer Dereference"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-25T18:41:53.980Z"}}]}}}