CVE-2024-27213: Use After Free
In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2024-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27213?
CVE-2024-27213 has been classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-27213?
To remediate CVE-2024-27213, update your Android device to a version that includes the security patch addressing this vulnerability.
What are the potential impacts of CVE-2024-27213?
CVE-2024-27213 can allow an attacker to execute arbitrary code remotely, which may lead to local privilege escalation.
Is user interaction required to exploit CVE-2024-27213?
No, CVE-2024-27213 can be exploited without any user interaction.
Which software versions are affected by CVE-2024-27213?
CVE-2024-27213 specifically affects Android version 13.0.