CVE-2024-49731: Medium severity Google Android vulnerability

Published Sep 4, 2025

Updated

In apk-versions.txt, there is a possible corruption of telemetry opt-in settings on other watches when setting up a new Pixel Watch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Software

1 affected component

Google Android=13.0

Event History

Sep 4, 2025

CVE Published

via MITRE·07:18 PM

Data Sourced

via MITRE·07:18 PM

DescriptionWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-49731?

CVE-2024-49731 has a severity rating that indicates a local escalation of privilege vulnerability.

How do I fix CVE-2024-49731?

To fix CVE-2024-49731, ensure that you update to the latest security patch provided by Google for Android 13.0.

What systems are affected by CVE-2024-49731?

CVE-2024-49731 specifically affects devices running Google Android 13.0.

Is user interaction needed to exploit CVE-2024-49731?

Yes, user interaction is needed to exploit CVE-2024-49731.

What can happen if CVE-2024-49731 is exploited?

If exploited, CVE-2024-49731 could lead to local escalation of privilege, allowing unauthorized access to system settings.