CVE-2024-25987
Last modified
CVE-2024-25987 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. EPSS estimates a 0.08% chance of exploitation in the next 30 days.
Description
In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 13.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-25987?
How severe is CVE-2024-25987?
How do I fix CVE-2024-25987?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-25981Separate Groups mode restrictions were not honored when perf…5.3
- CVE-2024-25982The link to update all installed language packs did not incl…8.8
- CVE-2024-25983Insufficient checks in a web service made it possible to add…5.3
- CVE-2024-25984In dumpBatteryDefend of dump_power.cpp, there is a possible …6.2
- CVE-2024-25985In bigo_unlocked_ioctl of bigo.c, there is a possible UAF du…8.4
- CVE-2024-25986In ppmp_unprotect_buf of drm_fw.c, there is a possible compr…7.8
- CVE-2024-25988In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is…8.4
- CVE-2024-25989In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a po…5.9
- CVE-2024-2599File upload restriction evasion vulnerability in AMSS++ vers…8.8
- CVE-2024-25990In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pkt…6.4
- CVE-2024-25991In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible…3.3
- CVE-2024-25992In tmu_tz_control of tmu.c, there is a possible out of bound…7.8
Are you affected by CVE-2024-25987?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST