CVE-2024-43085
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Nov 13, 2024
Updated: Nov 15, 2024
CWE ID 276
Summary
CVE-2024-43085 is a newly disclosed vulnerability affecting the handling of USB messages in UsbDeviceManager.java. A logic error in the code allows an attacker to potentially access device contents over USB without requiring device unlocking. This issue could result in local privilege escalation, granting an attacker elevated access to the system without the need for additional execution privileges or user interaction.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android