CVE-2024-27227

CVE Enrichment

CVSS: 9.8 CRITICAL
EPSS: 0.32%
EPSS Percentile: 25.08%
CISA KEV: Not listed

Description

A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 12-Mar-2024 02:15
Last Modified: 17-Jun-2026 14:19
EPSS Date: 2026-11-05
CWE: CWE-787

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CNA Products / Version Status

google · pixel Source: CNA · 134c704f-9b21-4f2e-91b3-4a467353bcc0
Default status: unknown

0 ≤ version < 20240305 — affected (custom)

CPEs: cpe:2.3:o:google:pixel:-:*:*:*:*:*:*:*
Google · Android Source: CNA · [email protected]
Default status: unaffected

13 — affected

Affected Products / Versions

google / android Source: NVD CPE · affected
Version / affected range: -
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

References

af854a3a-2127-422b-91ae-364da2661108

Last enrichment sync: 06-Nov-2026 09:31
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

The implementation adapts the hickory-proto crate for embedded use, uses cargo-gnaw to manage dependencies, and complements prior mitigations to address issues like CVE-2024-27227. Google Adds Rust DNS Parser to Pixel 10 Modem to Reduce Memory-Safety Risk

People (1)

Vendors (1)

Products (2)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.