CVEvulnerability
CVE-2024-0026
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-400, CWE-770
Description
In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected configurations
• google android 12.0
• google android 12.1
• google android 13.0
• google android 14.0
Related
References
- https://android.googlesource.com/platform/frameworks/base/+/a8fb9fe93efdebc4145e00934f42c91742f328de Mailing List, Patch
- https://source.android.com/security/bulletin/2024-04-01 Patch, Vendor Advisory
- https://android.googlesource.com/platform/frameworks/base/+/a8fb9fe93efdebc4145e00934f42c91742f328de Mailing List, Patch
- https://source.android.com/security/bulletin/2024-04-01 Patch, Vendor Advisory