medium6.6
CVE-2024-20054
In gnss, there is a possible escalation of privilege due to a missing bounds check.
Impact
In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580200; Issue ID: ALPS08580200.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxfoundation | Yocto | Versions 2.6, 3.3 |
| Rdkcentral | Rdk-B | Version 2022q3 |
| Android | Versions 13.0, 14.0 | |
| Openwrt | Openwrt | Versions 19.07.0, 21.02.0 |