CVE-2024-34748
Published: 28 January 2025
Summary
CVE-2024-34748 is a high-severity Use After Free (CWE-416) vulnerability in Google Android. Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 9.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and CM-6 (Configuration Settings).
Deeper analysis
CVE-2024-34748 is a use-after-free vulnerability stemming from improper casting in the _DevmemXReservationPageAddress function within devicemem_server.c. This flaw affects the Android kernel, potentially enabling arbitrary code execution at the kernel level.
A local attacker can exploit this vulnerability with no additional execution privileges required and without needing user interaction. Successful exploitation leads to local escalation of privilege in the kernel, granting high-impact confidentiality, integrity, and availability effects as reflected in its CVSS v3.1 score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The issue is classified under CWE-416 (Use After Free).
The Android Security Bulletin dated October 1, 2024, addresses this vulnerability with patches available at https://source.android.com/security/bulletin/2024-10-01.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-35171
Vulnerability details
In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Use-after-free in Android kernel directly enables local arbitrary code execution for privilege escalation (T1068).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the use-after-free vulnerability by identifying, reporting, and applying the patches available in the Android Security Bulletin.
Implements memory protection safeguards to prevent unauthorized access to freed memory addresses exploited in the improper casting leading to use-after-free.
Enforces secure kernel configuration settings, such as hardened usercopy or page allocation protections, to mitigate exploitation of the kernel use-after-free vulnerability.