Skip to content
NewA calmer, faster ZeroHour

Serbian student’s Android phone compromised by exploit from Cellebrite

Ars Technica · Security ()2 min read3 · 1 read
Analyze CVE-2024-53104 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-50302
Kernel Memory Leak via Uninitialized HID Report Buffer in Linux Kernel
5.5<1%KEV
KEV
CVE-2024-53104
Out-of-Bounds Write in Linux Kernel UVC Video Driver (CVE-2024-53104)
7.83%KEV
KEV
CVE-2024-53197
Out-of-Bounds Write in Linux Kernel ALSA USB Audio Driver (CVE-2024-53197)
7.84%KEV
KEV

From the original article

2 min read at arstechnica.com

Amnesty International on Friday said it determined that a zero-day exploit sold by controversial exploit vendor Cellebrite was used to compromise the phone of a Serbian student who had been critical of that country’s government.

Ars Technica · Security

arstechnica.com

Read the full article at Ars Technica · Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.