CVE-2024-53837
Published: 03 January 2025
Summary
CVE-2024-53837 is a high-severity Out-of-bounds Write (CWE-787) vulnerability in Google Android. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 10.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2024-53837 involves an out-of-bounds write vulnerability stemming from an integer overflow in the prepare_response function within lwis_periodic_io.c. This flaw affects Google Pixel devices running Android, as identified in the official security bulletin.
A local attacker with low privileges (PR:L) can exploit the vulnerability with low attack complexity and no user interaction required. Successful exploitation enables local escalation of privilege, resulting in high impacts to confidentiality, integrity, and availability, as reflected in its CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
The Android Security Bulletin for Pixel devices, dated 2024-12-01 and available at https://source.android.com/security/bulletin/pixel/2024-12-01, details patches mitigating this issue (CWE-787) for supported Pixel models. Security practitioners should ensure devices are updated to the latest firmware to address exposure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-52164
Vulnerability details
In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Out-of-bounds write via integer overflow enables local privilege escalation on Android (kernel driver context).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates the integer overflow vulnerability by requiring timely remediation through application of the vendor patch detailed in the Android Security Bulletin.
Implements memory protections such as stack canaries, ASLR, and DEP to prevent successful exploitation of the out-of-bounds write even if the flaw is present.
Requires validation of inputs and parameters to the prepare_response function to avert integer overflows that trigger the out-of-bounds write.