Out of Bounds Write Vulnerability in Android Parcel Handling
CVE-2024-49738

7.8HIGH

Key Information:

Vendor
Google
Status
Android
Vendor
CVE Published:
21 January 2025

Summary

A potential out of bounds write vulnerability exists within the Parcel handling operations in Android's Parcel.cpp. This flaw can allow an attacker to escalate local privileges without requiring any additional execution permissions or user interaction. Such vulnerabilities can pose significant security risks, particularly in multi-user environments. It is essential for users to ensure their systems are updated to mitigate the risks associated with this vulnerability.

Affected Version(s)

Android 15

Android 14

Android 13

References

https://source.android.com/security/bulletin/2025-01-01

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.