Resource Exhaustion Vulnerability in Android Telephony Services
CVE-2024-49740

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
26 August 2025

What is CVE-2024-49740?

The vulnerability allows for a potential crash loop in Android Telephony Services, which can lead to resource exhaustion. This situation permits a local denial of service without the need for elevated execution privileges, and notably, does not require user interaction for exploitation. Users may experience severe service disruptions as the system becomes unstable.

Affected Version(s)

Android 15

Android 14

Android 13

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-49740 : Resource Exhaustion Vulnerability in Android Telephony Services