VDB

CVE-2024-39435

CVE-2024-39435 PUBLISHED CVSS 6.5 MEDIUM

In Logmanager service, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed.

EPSS 0.08% · 0.2th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.08%
0.2th percentile

Affected Products

VendorProductVersions
unisoct820android_13, android_14, *
googleandroid13.0, 14.0, 12.0
Unisoc (Shanghai) Technologies Co., Ltd.SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000Android12/Android13/Android14, Android12/Android13/Android14

Timeline

  • Sep 27, 2024 CVE Published
  • Sep 27, 2024 CVE Updated
  • Sep 27, 2024 PoC Published
  • Sep 28, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 17, 2024 EPSS Score
  • Nov 6, 2024 EPSS Score
  • Nov 25, 2024 EPSS Score
  • Dec 15, 2024 EPSS Score
  • Jan 3, 2025 EPSS Score
  • Jan 23, 2025 EPSS Score
  • Feb 11, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›