CVE-2024-47039

An out of bounds read error (CWE-125) occurs in the isSlotMarkedSuccessful function of the BootControl.cpp component. Due to lack of array or buffer boundary verification, it is possible to read data outside the intended memory area. The attacker does not need additional execution privileges or user interaction to trigger this vulnerability locally.

An attacker with local access to the device can obtain unauthorized access to sensitive data stored in memory outside the intended buffer. The vulnerability leads to information disclosure (local information disclosure), without the possibility of direct code execution.

Security patches available from the vendor should be applied according to references — Google Pixel security bulletin published 2024-11-01: https://source.android.com/security/bulletin/pixel/2024-11-01

Google Android — specific versions indicated in vendor references (Pixel security bulletin from 2024-11-01)