CVE-2024-0034: High severity android vulnerability
In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0034?
CVE-2024-0034 has a high severity rating due to its potential for local escalation of privilege without user interaction.
How do I fix CVE-2024-0034?
To mitigate CVE-2024-0034, update your Android device to the latest security patch provided by Google.
What versions of Android are affected by CVE-2024-0034?
CVE-2024-0034 affects Android versions 11.0, 12.0, 12.1, and 13.0.
Is user interaction required to exploit CVE-2024-0034?
No, user interaction is not needed for the exploitation of CVE-2024-0034.
What could be the consequences of exploiting CVE-2024-0034?
Exploitation of CVE-2024-0034 could allow an attacker to launch arbitrary activities from the background, leading to a local escalation of privileges.