CVE-2024-40662

2024-09-1100:09:19

google_android

github.com

uri.java validation exploitation

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "android",
    "versions": [
      {
        "status": "affected",
        "version": "12"
      },
      {
        "status": "affected",
        "version": "12l"
      },
      {
        "status": "affected",
        "version": "13"
      },
      {
        "status": "affected",
        "version": "14"
      }
    ],
    "defaultStatus": "unknown"
  }
]