CVE-2024-49724

CVSS 3.1 Score 7.0 of 10 (high)

Details

Published Jan 21, 2025

Updated: Jan 22, 2025

CWE ID 362

Summary

CVE-2024-49724 is a newly discovered vulnerability affecting the AccountManagerService.java in multiple functions. This issue introduces a race condition, allowing an attacker to bypass permissions and launch protected activities. Although no additional execution privileges are required, user interaction is essential for successful exploitation. As a result, local privilege escalation can occur, potentially compromising the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/zmUL-U
https://www.cve.org/CVERecord?id=CVE-2024-49724
https://nvd.nist.gov/vuln/detail/CVE-2024-49724

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Predator Still Active, with New Client and Corporate Links Identified

Russia-Aligned TAG-110 Targets Tajikistan with Macro-Enabled Word Documents

Measuring the US-China AI Gap

Know What Matters

For Customers

For Partners