CVE-2024-40670
Published: 28 January 2025
Description
In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Security Summary
CVE-2024-40670 is a use-after-free vulnerability stemming from a race condition in TBD of TBD. It affects Android systems, as detailed in the associated security bulletin. The issue is classified under CWE-416 and carries a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), highlighting its high severity due to potential impacts on confidentiality, integrity, and availability.
A local attacker requires no additional execution privileges or user interaction to exploit this vulnerability. Successful exploitation enables local escalation of privilege, allowing the attacker to gain elevated access on the affected Android device.
The Android Security Bulletin at https://source.android.com/security/bulletin/2024-10-01 provides information on available patches and mitigation steps for this CVE.
Details
- CWE(s)