CVE-2024-0047

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. This could lead to local denial of service when policies are deserialized on reboot with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Mar 11, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-00487.8In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of nu CVE-2024-00497.8In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privile CVE-2024-00507.8In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead CVE-2024-00517.8In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalatio CVE-2024-00523.3In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lea CVE-2024-00533.3In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This coul CVE-2024-00546.5Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs local_list.cgi, create_overlay.cgi and irissetup.cgi w CVE-2024-00556.5Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file CVE-2024-00568.7Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability CVE-2024-00579.8NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability CVE-2024-00665.3Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic between the client (Ax CVE-2024-00674.3Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API ledlimit.cgi was vulnerable for path traversal attacks all