{"id":"CVE-2024-56188","state":"PUBLISHED","title":"there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction","description":"there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","publishedAt":"2025-03-10T18:19:49.450Z","updatedAt":"2025-03-11T20:32:10.132Z","severity":{"score":5.1,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","source":"CISA-ADP"},"assigner":"Google_Devices","products":["Google Android"],"affected":[{"vendor":"Google","product":"Android","defaultStatus":"unaffected","versions":[{"version":"Android kernel","status":"affected"}]}],"references":["https://source.android.com/security/bulletin/pixel/2025-03-01"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/56xxx/CVE-2024-56188.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-56188","state":"PUBLISHED","datePublished":"2025-03-10T18:19:49.450Z","dateUpdated":"2025-03-11T20:32:10.132Z","assignerShortName":"Google_Devices","assignerOrgId":"83238938-5644-45f0-9007-c0392bcf6222","dateReserved":"2024-12-18T17:17:02.549Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation."}],"affected":[{"vendor":"Google","product":"Android","defaultStatus":"unaffected","versions":[{"version":"Android kernel","status":"affected"}]}],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2025-03-01"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Denial of service"}]}],"providerMetadata":{"shortName":"Google_Devices","orgId":"83238938-5644-45f0-9007-c0392bcf6222","dateUpdated":"2025-03-10T18:19:49.450Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-03-11T20:30:45.451766Z","id":"CVE-2024-56188","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","type":"CWE","lang":"en","description":"CWE-476 NULL Pointer Dereference"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-11T20:32:10.132Z"}}]}}}