CVE-2024-49724: Race Condition
In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49724?
CVE-2024-49724 is classified with a high severity due to its potential for local privilege escalation.
How do I fix CVE-2024-49724?
To mitigate CVE-2024-49724, update your Android device to the latest security patch provided by Google.
Who is affected by CVE-2024-49724?
CVE-2024-49724 affects users of Google Android operating systems that contain the vulnerable versions of AccountManagerService.java.
Is user interaction required to exploit CVE-2024-49724?
Yes, user interaction is required to exploit CVE-2024-49724, making it dependent on the user's actions.
What are the potential consequences of CVE-2024-49724?
Exploitation of CVE-2024-49724 could allow an attacker to bypass permissions and initiate protected activities, leading to unauthorized access.