CVE-2024-43080

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Nov 13, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-430817.8In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the cod CVE-2024-430825.5In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy. This could lead to CVE-2024-430835.5In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion. This could lead to CVE-2024-430845.5In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information di CVE-2024-430857.8In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to CVE-2024-430865.5In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a CVE-2024-430877.8In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in t CVE-2024-430887.8In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the de CVE-2024-430897.8In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could le CVE-2024-43098.1SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL q CVE-2024-430905.0In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information dis CVE-2024-430919.8In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code