CVE-2024-0036: High severity android vulnerability
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0036?
CVE-2024-0036 has a severity rating that indicates it could allow local escalation of privilege.
What are the affected versions for CVE-2024-0036?
CVE-2024-0036 affects Android versions 11.0, 12.0, 12.1, 13.0, and 14.0.
How do I fix CVE-2024-0036?
To fix CVE-2024-0036, update your Android device to the latest security patch provided by Google.
What type of vulnerability is CVE-2024-0036?
CVE-2024-0036 is a logic error vulnerability that allows for a bypass of restrictions on starting activities from the background.
Could CVE-2024-0036 be exploited remotely?
No, CVE-2024-0036 requires local access to exploit the privilege escalation.