CVE-2024-20012: Medium severity Google Android vulnerability
In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358566; Issue ID: ALPS08358566.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS08358566
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20012?
CVE-2024-20012 has a high severity level due to the potential for local escalation of privilege and system execution.
How do I fix CVE-2024-20012?
To remediate CVE-2024-20012, apply the patch ID ALPS08358566 provided by the vendor.
Who is affected by CVE-2024-20012?
CVE-2024-20012 affects devices running Google Android versions 12.0 and 13.0 affected by the vulnerability.
Is user interaction required to exploit CVE-2024-20012?
No, user interaction is not needed for the exploitation of CVE-2024-20012.
What is the nature of the vulnerability described in CVE-2024-20012?
CVE-2024-20012 is a type confusion vulnerability leading to escalation of privilege.