Elevation of privilege in Android (CVE-2024-0044) #shorts #breaking

CVE

CVE-2024-0044 is an elevation of privilege vulnerability found in Android operating systems. This vulnerability, which surfaced approximately seven months ago, affects Android versions 12, 12L, 13, and 14. While it is not classified as a zero-day, exploit code has been provided by security researchers and a potential Metasploit module could be utilized for exploitation. Although no specific organizations have been reported as targeted, all users of the affected Android versions are at risk. Attackers exploiting this vulnerability could potentially extract data from installed applications, access sensitive user information, and retrieve specific databases such as those used by WhatsApp.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://android.googlesource.com/platform/frameworks/base/+/954b2874b85b6cd0d6bb12cd677cdf22e5dbd77b
• https://android.googlesource.com/platform/frameworks/base/+/836750619a8bce0bf78fe0549f9990e294671563
• https://source.android.com/security/bulletin/2024-10-01