CVE-2024-34731

In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

• CWE-362
• CWE-368

• https://android.googlesource.com/platform/frameworks/av/+/4b68b00993849b6a7f0e6d075bc2c8bb2e184e61Mailing List, Patch
• https://android.googlesource.com/platform/hardware/interfaces/+/0ff19d1f89614fce9454fb415bcbfcbcf3caf76eMailing List, Patch
• https://android.googlesource.com/platform/hardware/interfaces/+/d63d09261806f7f1aa01406867f2a9e169356fcaMailing List, Patch
• https://android.googlesource.com/platform/system/nfc/+/1037992b9abcde1e3560bd895f62644a68563b3dMailing List, Patch
• https://android.googlesource.com/platform/system/security/+/d3805312d73433e34ef69a645b553a2969c5dc93Mailing List, Patch
• https://source.android.com/security/bulletin/2024-08-01Patch, Vendor Advisory

Published

Aug 15, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34725In DevmemIntUnexportCtx of devicemem_server.c, there is a po…7
• CVE-2024-34726In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitr…7.8
• CVE-2024-34727In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a p…7.5
• CVE-2024-34729In multiple locations, there is a possible arbitrary code ex…7.8
• CVE-2024-3473The Header Footer Code Manager Pro plugin for WordPress is v…6.1
• CVE-2024-34730In multiple locations, there is a possible bypass of user co…7.8
• CVE-2024-34732In RGXMMUCacheInvalidate of rgxmem.c, there is a possible ar…8.4
• CVE-2024-34733In DevmemXIntMapPages of devicemem_server.c, there is a poss…8.4
• CVE-2024-34734In onForegroundServiceButtonClicked of FooterActionsViewMode…7.8
• CVE-2024-34736In setupVideoEncoder of StagefrightRecorder.cpp, there is a …7.8
• CVE-2024-34737In ensureSetPipAspectRatioQuotaTracker of ActivityClientCont…7.8
• CVE-2024-34738In multiple functions of AppOpsService.java, there is a poss…7.8