CVE-2024-39441
Published: 26 February 2025
Description
In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
Security Summary
CVE-2024-39441 is a vulnerability in the wifi display component involving a missing permission check, which could lead to local escalation of privilege without additional execution privileges needed. The issue was published on 2025-02-26 and carries a CVSS v3.1 base score of 7.1 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N), indicating high confidentiality and integrity impacts with no availability impact.
A local attacker can exploit this vulnerability with low attack complexity, requiring user interaction but no prior privileges. Exploitation enables escalation of privilege on the affected system, potentially allowing unauthorized access to sensitive data or system resources.
Unisoc has published a security advisory detailing the issue at https://www.unisoc.com/en_us/secy/announcementDetail/1894203086612791298, which security practitioners should consult for mitigation guidance and patch information.
Details
- CWE(s)