CISA既知の悪用された脆弱性
Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.
必要な対応:
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
期限:
2024-04-25
説明
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
AI分析AIによる分析
影響を受ける製品
googleandroid
-
参照
- https://source.android.com/security/bulletin/pixel/2024-04-01Vendor Advisory
- https://source.android.com/security/bulletin/pixel/2024-04-01Vendor Advisory
- https://twitter.com/GrapheneOS/status/1775306481622995226Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29745US Government Resource