{"id":3200,"date":"2025-02-04T07:43:52","date_gmt":"2025-02-04T07:43:52","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/google-patches-47-android-security-flaws-including-actively-exploited-cve-2024-53104\/"},"modified":"2025-02-04T07:43:54","modified_gmt":"2025-02-04T07:43:54","slug":"google-patches-47-android-security-flaws-including-actively-exploited-cve-2024-53104","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/google-patches-47-android-security-flaws-including-actively-exploited-cve-2024-53104\/","title":{"rendered":"Google Patches 47 Android Security Flaws, Including Actively Exploited CVE-2024-53104"},"content":{"rendered":"\n<\/p>\n<h1>Google Addresses 47 Android Security Flaws, Including One Exploited in the Wild<\/h1>\n<h2>February 4, 2025<\/h2>\n<h3>By Ravie Lakshmanan<\/h3>\n<p>Google has released patches to address 47 security flaws in its Android operating system, including one that has been actively exploited in the wild.<\/p>\n<h3>Vulnerability Details<\/h3>\n<p>The vulnerability in question is CVE-2024-53104 (CVSS score: 7.8), which is a case of privilege escalation in a kernel component known as the USB Video Class (UVC) driver. Successful exploitation of the flaw could lead to physical escalation of privilege, Google said, noting that it&#8217;s aware that it may be under &quot;limited, targeted exploitation.&quot;<\/p>\n<h3>Linux Kernel Connection<\/h3>\n<p>Linux kernel developer Greg Kroah-Hartman revealed in early December 2024 that the vulnerability is rooted in the Linux kernel and that it was introduced in version 2.6.26, which was released in mid-2008.<\/p>\n<h3>Out-of-Bounds Write Condition<\/h3>\n<p>The flaw is related to an out-of-bounds write condition that could arise as a result of parsing frames of type UVC_VS_UNDEFINED in a function named &quot;uvc_parse_format()&quot; in the uvc_driver.c program.<\/p>\n<h3>Weaponization<\/h3>\n<p>This also means that the flaw could be weaponized to result in memory corruption, program crash, or arbitrary code execution.<\/p>\n<h3>Additional Patch<\/h3>\n<p>Google has also patched a critical flaw in Qualcomm&#8217;s WLAN component (CVE-2024-45569, CVSS score: 9.8) that could also lead to memory corruption.<\/p>\n<h3>Patch Levels<\/h3>\n<p>It&#8217;s worth noting that Google has released two security patch levels, 2025-02-01 and 2025-02-05, so as to give flexibility to Android partners to address a portion of vulnerabilities that are similar across all Android devices more quickly.<\/p>\n<h3>Action Required<\/h3>\n<p>&quot;Android partners are encouraged to fix all issues in this bulletin and use the latest security patch level,&quot; Google said.<\/p>\n<h3>Stay Informed<\/h3>\n<p>Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.<\/p>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/02\/google-patches-47-android-security.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Google Addresses 47 Android Security Flaws, Including One Exploited in the Wild February 4, 2025 By Ravie Lakshmanan Google has released patches to address 47 security flaws in its Android&#8230;<\/p>\n","protected":false},"author":19,"featured_media":3201,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-3200","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/02\/android.png","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/3200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=3200"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/3200\/revisions"}],"predecessor-version":[{"id":3202,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/3200\/revisions\/3202"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/3201"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=3200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=3200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=3200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}