Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2024-47039

OOB Read in the android.hardware.boot.IBootControl/default service

Description

In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local  information disclosure with no additional execution privileges needed. User  interaction is not needed for exploitation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google Android

Default version status: unaffected

  • v10affected

References