VDB
CVE-2024-39436
CVE-2024-39436
PUBLISHED
CVSS 6.5 MEDIUM
In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed.
EPSS 0.25% · 16.8th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.25%
16.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| unisoc | t820 | android_13, android_14, android_13 |
| android | 13.0, 14.0, 13.0 | |
| Unisoc (Shanghai) Technologies Co., Ltd. | SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 | Android13/Android14, Android13/Android14 |
Timeline
- Oct 9, 2024 CVE Published
- Oct 9, 2024 PoC Published
- Oct 9, 2024 CVE Updated
- Oct 10, 2024 EPSS Score
- Oct 14, 2024 Coalition ESS Score
- Oct 17, 2024 Coalition ESS Score
- Oct 17, 2024 Coalition ESS Score
- Oct 29, 2024 EPSS Score
- Nov 17, 2024 EPSS Score
- Dec 7, 2024 EPSS Score
- Dec 26, 2024 EPSS Score
- Jan 14, 2025 EPSS Score