CVE-2024-34733
Published: 28 January 2025
Summary
CVE-2024-34733 is a high-severity Integer Overflow or Wraparound (CWE-190) vulnerability in Google Android. Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 8.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2024-34733 is an integer overflow vulnerability in the DevmemXIntMapPages function of devicemem_server.c, enabling arbitrary code execution. This issue affects the Android kernel and was published on 2025-01-28T20:15:30.893, with a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and association to CWE-190 (Integer Overflow or Wraparound).
A local attacker requires no additional execution privileges and no user interaction to exploit this vulnerability with low attack complexity. Successful exploitation leads to local escalation of privilege within the kernel, granting high levels of confidentiality, integrity, and availability impact.
The Android Security Bulletin at https://source.android.com/security/bulletin/2024-10-01 provides details on affected versions and available patches for mitigation.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-35170
Vulnerability details
In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Integer overflow in Android kernel function directly enables local arbitrary code execution for kernel privilege escalation with no privileges or user interaction required.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the integer overflow vulnerability in DevmemXIntMapPages through timely application of vendor patches, preventing local kernel privilege escalation.
Enforces validation of inputs to kernel functions like DevmemXIntMapPages to prevent integer overflows from untrusted data.
Implements kernel memory protections to restrict arbitrary code execution resulting from the integer overflow exploitation.