CVE-2024-0034

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Feb 16, 2024

Updated: Dec 16, 2024

Summary

CVE-2024-0034 is a newly disclosed vulnerability affecting BackgroundLaunchProcessController. This issue allows an attacker to bypass the BAL (Background Application Lifecycle) mechanism, enabling them to launch arbitrary activities from the background. Consequently, an attacker can perform local privilege escalation without the need for additional execution privileges or user interaction. This vulnerability poses a significant risk to affected systems, as it can be exploited without the user's knowledge.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/uaS44p
https://www.cve.org/CVERecord?id=CVE-2024-0034
https://nvd.nist.gov/vuln/detail/CVE-2024-0034

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Russia-Aligned TAG-110 Targets Tajikistan with Macro-Enabled Word Documents

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Know What Matters

For Customers

For Partners