In multiple locations, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.
References
Configurations
Configuration 1 (hide)
|
History
26 Aug 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) In multiple locations, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. | |
| References |
|
16 Dec 2024, 18:45
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* |
|
| References | () https://android.googlesource.com/platform/frameworks/base/+/4af5db76f25348849252e0b8a08f4a517ef842b7 - Mailing List, Patch | |
| References | () https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/5acd646e0cf63e2c9c0862da7e03531ef0074394 - Mailing List, Patch | |
| References | () https://source.android.com/security/bulletin/2024-02-01 - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Google android
|
Information
Published : 2024-02-16 02:15
Updated : 2025-08-26 23:15
NVD link : CVE-2024-0032
Mitre link : CVE-2024-0032
CVE.ORG link : CVE-2024-0032
JSON object : View
Products Affected
- android
CWE