CVE-2024-49744: High severity Google Android vulnerability
In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49744?
CVE-2024-49744 is classified as a high severity vulnerability due to its potential for local escalation of privilege.
How do I fix CVE-2024-49744?
To fix CVE-2024-49744, update your Android software to the latest version that includes the security patch.
What exploitation method is used in CVE-2024-49744?
CVE-2024-49744 exploits unsafe deserialization, which can lead to privilege escalation.
Is user interaction required for CVE-2024-49744 exploitation?
Yes, user interaction is necessary for the exploitation of CVE-2024-49744.
Which versions of Android are affected by CVE-2024-49744?
CVE-2024-49744 affects specific versions of Android prior to the security patch related to this vulnerability.