CVE-2024-0015

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-280

Affected software

VendorProductVersions
GoogleAndroid13; 12L; 12; 11
googleandroid11.0; 12.0; 12l; 13.0

References

Timeline

Published
Feb 16, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-00165.3In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired device information diCVE-2024-00175.5In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local iCVE-2024-00187.8In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could leadCVE-2024-00195.0In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due CVE-2024-00205.5In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a CVE-2024-00217.8In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to enable notification liCVE-2024-00225.5In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationActivity of another usCVE-2024-00237.8In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could leadCVE-2024-00247.8In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due to improper input vaCVE-2024-00257.8In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error. This could lead to CVE-2024-00265.5In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to CVE-2024-00275.5In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. This could lead to loca
CVE-2024-0015: High severity, CVSS 7.8 | Vulnix