First published: Mon May 06 2024(Updated: )
In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Credit: security@android.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | ||
Google Android | =12.0 | |
Google Android | =12.1 | |
Google Android | =13.0 | |
Google Android | =14.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-23709 is classified as a medium severity vulnerability due to potential remote information disclosure.
To address CVE-2024-23709, users should update their Google Android devices to the latest available version.
CVE-2024-23709 affects Google Android devices running versions 12.0, 12.1, 13.0, and 14.0.
Yes, CVE-2024-23709 requires user interaction for successful exploitation.
The impact of CVE-2024-23709 includes the potential for remote information disclosure without additional execution privileges.