Loading
In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure of 4 bytes of stack memory with no additional execution privileges needed. User interaction is not needed for exploitation.
Use CWE-665, Google vendor hub and Android product page to widen CVE-2024-32930 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2026-0124, CVE-2026-0120 and CVE-2026-6920 for nearby disclosures in the same product family.