CVE-2024-49734
In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to side channel information disclosure. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Vendor
Product
CWE
Yayın Tarihi
2025-01-21 23:15:14
Güncelleme
2025-04-22 14:39:15
Source Identifier
security@android.com
KEV Date Added
-