CVE-2024-32892
CVE-2024-32892: Memory corruption vulnerability in Goodix devices! CVE-2024-32892 describes a type confusion vulnerability within the handle_init
function in goodix/main/main.c
, potentially leading to local privilege escalation. This vulnerability allows an attacker to gain elevated privileges on a compromised device without requiring any user interaction or additional execution privileges.
While the CVSS score is 7.8, indicating high severity, the SOCRadar Vulnerability Risk Score (SVRS) of 34 suggests a lower immediate risk compared to critical vulnerabilities. However, it's still crucial to address this security flaw promptly, especially since the vulnerability is tagged as "In The Wild" meaning that it is currently being exploited. Successful exploitation of CVE-2024-32892 can severely compromise the security posture of affected systems, potentially allowing attackers to perform unauthorized actions. Mitigation steps should be taken as soon as possible.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.