CVE-2024-40651

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
GoogleAndroidAndroid SoC

References

Timeline

Published
Jan 28, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-406527.8In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a mCVE-2024-406537.3In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a loCVE-2024-406547.8In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege withCVE-2024-406557.8In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the bacCVE-2024-406565.5In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused CVE-2024-406577.8In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused depuCVE-2024-406587.8In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to CVE-2024-406595.5In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation featCVE-2024-40668.8A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goCVE-2024-406607.8In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the codCVE-2024-406617.8In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due to a missing permisCVE-2024-406627.8In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local es
CVE-2024-40651: High severity, CVSS 8.4 | Vulnix