CVE-2024-27207: Critical severity Google Android vulnerability
Exported broadcast receivers allowing malicious apps to bypass broadcast protection.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2024-03-05 - Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Platform:2024-03-05 - Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in pi:2024-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27207?
CVE-2024-27207 is classified as a moderate severity vulnerability affecting Android 13.0.
How does CVE-2024-27207 impact security?
CVE-2024-27207 allows malicious applications to exploit exported broadcast receivers, potentially bypassing broadcast protection.
Which versions of Android are affected by CVE-2024-27207?
CVE-2024-27207 specifically affects Android version 13.0.
How do I fix CVE-2024-27207?
To fix CVE-2024-27207, update to a patched version of the Android operating system if available.
What symptoms indicate an exploitation of CVE-2024-27207?
Symptoms may include unexpected behavior from applications that should not interact with each other due to restricted broadcast communications.