CVE-2024-40649

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jan 28, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-40658.8A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This issue affects the function formSetRebootTimer of theCVE-2024-406507.8In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalaCVE-2024-406518.4In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the CVE-2024-406527.8In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a mCVE-2024-406537.3In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a loCVE-2024-406547.8In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege withCVE-2024-406557.8In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the bacCVE-2024-406565.5In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused CVE-2024-406577.8In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused depuCVE-2024-406587.8In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to CVE-2024-406595.5In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation featCVE-2024-40668.8A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /go
CVE-2024-40649: High severity, CVSS 8.4 | Vulnix