CVE-2024-34721: Input Validation
First published: Mon Jul 01 2024(Updated: )
In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Android | =12.0 | |
| Android | =12.1 | |
| Android | =13.0 | |
| Android | =14.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-34721?
CVE-2024-34721 is classified as a local information disclosure vulnerability.
How do I fix CVE-2024-34721?
To fix CVE-2024-34721, update to the latest version of Android that addresses this vulnerability.
What versions of Android are affected by CVE-2024-34721?
CVE-2024-34721 affects Android versions 12.0, 12.1, 13.0, and 14.0.
What causes the vulnerability in CVE-2024-34721?
CVE-2024-34721 is caused by improper input validation in the ensureFileColumns function of MediaProvider.java.
Can CVE-2024-34721 be exploited without user interaction?
Yes, CVE-2024-34721 can be exploited without any user interaction.
- agent/description
- agent/type
- agent/references
- agent/first-publish-date
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/event
- agent/severity
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/source
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- vendor/google
- canonical/android
- version/android/12.0
- version/android/12.1
- version/android/13.0
- version/android/14.0