CVE-2024-40675

Summary

CVE-2024-40675 is a newly identified vulnerability affecting the parseUriInternal function in Intent.java. The issue stems from insufficient input validation, leading to an infinite loop. This vulnerability could be exploited to cause a local denial of service, without requiring any additional execution privileges. Notably, user interaction is not necessary for an attacker to exploit this flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.