CVE-2024-43088

CVSS 3.1 Score 8.4 of 10 (high)

Details

Published Nov 13, 2024

Updated: Nov 15, 2024

CWE ID 862

Summary

CVE-2024-43088 is a newly disclosed vulnerability affecting multiple functions in AppInfoBase.java. This issue permits manipulation of app permission settings for other users on the device, bypassing essential permission checks. The consequence is a local escalation of privilege across user boundaries, which means an attacker can exploit this vulnerability to gain unauthorized access to other users' applications without requiring any additional execution privileges or user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/0Nb3bn
https://www.cve.org/CVERecord?id=CVE-2024-43088
https://nvd.nist.gov/vuln/detail/CVE-2024-43088

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

US Violent Extremists Likely Shifting Focus to Targeted Physical Threats in 2025

DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal

Threats to the 2025 NATO Summit

Know What Matters

For Customers

For Partners