Google Releases April Android Update to Address Two Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-50302 | Kernel Memory Leak via Uninitialized HID Report Buffer in Linux Kernel | 5.5 | <1% | KEV | KEV |
| CVE-2024-53104 | Out-of-Bounds Write in Linux Kernel UVC Video Driver (CVE-2024-53104) | 7.8 | 3% | KEV | KEV |
| CVE-2024-53150 | Out-of-Bounds Read in Linux Kernel ALSA USB Audio Driver | 7.1 | 1% | KEV | KEV |
| CVE-2024-53197 | Out-of-Bounds Write in Linux Kernel ALSA USB Audio Driver (CVE-2024-53197) | 7.8 | 4% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
A new Android security update from Google has patched 62 vulnerabilities, including two zero-day flaws that were being actively exploited. The high-severity issues – tracked as CVE-2024-53150 and CVE-2024-53197 – were found in the Linux kernel’s USB sub-component and could be used to escalate privileges or access sensitive information without user interaction.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.