CVE-2024-40672 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local esc…
High CVSS: 8.4

CVE-2024-40672

In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Vendor
Google
Product
Android
CWE
CWE-281
Yayın Tarihi
2025-01-28 20:15:49
Güncelleme
2025-04-18 02:14:14
Source Identifier
security@android.com
KEV Date Added
-

Kategoriler

CWE-281 Android HIGH Google 2025

Referanslar

https://android.googlesource.com/platform/packages/modules/IntentResolver/+/ccd29124d0d2276a3071c0418c14dec188cd3727 https://source.android.com/security/bulletin/2024-10-01