CVE-2024-0026
First published: Mon Apr 01 2024(Updated: )
In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Android | =12.0 | |
| Android | =12.1 | |
| Android | =13.0 | |
| Android | =14.0 |
Remedy
https://android.googlesource.com/platform/frameworks/base/+/a8fb9fe93efdebc4145e00934f42c91742f328de
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-0026?
CVE-2024-0026 has a severity classification of moderate, indicating potential impact on system availability.
How do I fix CVE-2024-0026?
To address CVE-2024-0026, updating impacted Android devices to the latest version that includes the security patch is recommended.
Which Android versions are affected by CVE-2024-0026?
CVE-2024-0026 affects Google Android versions 12.0, 12.1, 13.0, and 14.0.
Can CVE-2024-0026 be exploited without user interaction?
Yes, CVE-2024-0026 can be exploited locally without any user interaction.
What is the impact of CVE-2024-0026?
CVE-2024-0026 can lead to a persistent denial of service due to resource exhaustion on affected Android devices.
- agent/description
- agent/type
- agent/references
- agent/first-publish-date
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/severity
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- vendor/google
- canonical/android
- version/android/12.0
- version/android/12.1
- version/android/13.0
- version/android/14.0