LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CRITICAL CWE-787

CVE-2024-27227

Google Android vulnerability

Google·Android

9.8/ 10

CVSS 3.1

Critical severity

0.32%

EPSS exploit odds

Chance of exploitation in the next 30 days

Higher than 25% of all CVEs

Not listed

CISA KEV catalog

No confirmed in-the-wild exploitation on CISA's list.

Timeline

Published: Mar 11, 2024
Updated: Mar 25, 2025
First covered: Jun 29, 2026
Latest story: 5 months ago

Summary

A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues

CWE-787Out-of-bounds Write

Attack profile

Attack vectorNetwork

ComplexityLow

PrivilegesNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Google Android13

References

CVE.org recordcve.org NVD entrynvd.nist.gov Advisorysource.android.com