CVE-2024-47038

The vulnerability results from missing bounds check verification in the dhd_prot_flowrings_pool_release function responsible for releasing the flow rings pool in the Wi-Fi communication driver (dhd_msgbuf.c). An attacker can cause data to be written outside the allocated buffer (out-of-bounds write, CWE-787), allowing manipulation of kernel memory structures. This results in the possibility of local privilege escalation without requiring user interaction.

A local attacker without additional privileges can obtain elevated system privileges (privilege escalation), which may lead to full control of the device.

Apply patches available from the manufacturer according to the references – Pixel security bulletin from 2024-11-01 (https://source.android.com/security/bulletin/pixel/2024-11-01).

Google Android – versions indicated in the manufacturer's references (Pixel security bulletin, 2024-11-01)