CVE-2024-40660: High severity android vulnerability
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40660?
CVE-2024-40660 has a severity level that indicates a local escalation of privilege due to a logic error in the code.
How do I fix CVE-2024-40660?
To fix CVE-2024-40660, ensure that your Android device is updated to the latest version, specifically version 15.0 or later.
Who is affected by CVE-2024-40660?
CVE-2024-40660 affects devices running Google Android versions 14.0 and 15.0.
Is user interaction required to exploit CVE-2024-40660?
No, user interaction is not required to exploit CVE-2024-40660.
What kind of issues can CVE-2024-40660 cause?
CVE-2024-40660 can allow an attacker to change protected display attributes, potentially leading to privilege escalation.