CVE-2024-43083

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

VendorProductVersions
GoogleAndroid15; 14; 13; 12L; 12

References

Timeline

Published
Nov 13, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-430845.5In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information diCVE-2024-430857.8In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due toCVE-2024-430865.5In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to aCVE-2024-430877.8In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in tCVE-2024-430887.8In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the deCVE-2024-430897.8In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could leCVE-2024-43098.1SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL qCVE-2024-430905.0In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information disCVE-2024-430919.8In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code CVE-2024-430937.3In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitCVE-2024-430957.8In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local esCVE-2024-430968.8In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (pro
CVE-2024-43083: Medium severity, CVSS 5.5 | Vulnix