SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2024-22006

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.

MEDIUM 5.3EPSS 0.23%

Does this matter?

Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.

Description

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.

CVSS 3.1
5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.23% probability · 13th percentile
CISA KEV
Not listed
Weakness
CWE-125
Affected
google/android
Source
dsap-vuln-management@google.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.