PT-2025-2756 · Unknown · Lwis Ioctl.C

Published 2025-01-03 · Updated 2025-01-08 · CVE-2024-47032

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: lwis ioctl.c (affected versions not specified)

Description: In the construct transaction from cmd function of lwis ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-47032

Affected Products

Lwis Ioctl.C

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-47032 · Security Note
• https://t.me/cvedetector/14204 · Telegram Post
• https://t.me/cvenotify/106118 · Telegram Post
• https://twitter.com/CVEnew/status/1875033730080751728 · Twitter Post
• https://t.me/cvenotify/106283 · Telegram Post
• https://twitter.com/cracbot/status/1876871528249483374 · Twitter Post
• https://source.android.com/security/bulletin/pixel/2024-12-01 · Note
• https://twitter.com/CVETracker/status/1875385093377708058 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1875069884284985489 · Twitter Post