CVE-2024-49733: Infoleak

Published Jan 6, 2025

Updated

In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

6 affected components

Google Android=12.0

Google Android=12.1

Google Android=13.0

Google Android=14.0

Google Android=15.0

Google Android

Event History

Jan 6, 2025

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Jan 21, 2025

CVE Published

via MITRE·11:04 PM

Data Sourced

via MITRE·11:04 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2024-49733?

CVE-2024-49733 is assessed as having a moderate severity due to the potential for information disclosure.

How do I fix CVE-2024-49733?

To fix CVE-2024-49733, update your Android device to the latest security patch provided by Google.

What does CVE-2024-49733 affect?

CVE-2024-49733 affects the Google Android operating system, specifically the ServiceListing.java component.

Can CVE-2024-49733 be exploited remotely?

No, CVE-2024-49733 requires local access to exploit, meaning user interaction is not needed.

What is the impact of CVE-2024-49733?

The impact of CVE-2024-49733 could lead to local information disclosure without requiring additional execution privileges.