CVE-2024-40674

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-40674
In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS

No CVSS.

References
Link Resource
https://android.googlesource.com/platform/packages/modules/Wifi/+/debc548ac085ba1ab0582172b97d965e9a1ea43a Product
https://source.android.com/security/bulletin/2024-10-01 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
History

22 Apr 2025, 14:27

Type Values Removed Values Added
CPE cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
First Time Google android
Google
References () https://source.android.com/security/bulletin/2024-10-01 - () https://source.android.com/security/bulletin/2024-10-01 - Vendor Advisory
References () https://android.googlesource.com/platform/packages/modules/Wifi/+/debc548ac085ba1ab0582172b97d965e9a1ea43a - () https://android.googlesource.com/platform/packages/modules/Wifi/+/debc548ac085ba1ab0582172b97d965e9a1ea43a - Product

28 Jan 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-28 20:15

Updated : 2025-04-22 14:27

NVD link : CVE-2024-40674

Mitre link : CVE-2024-40674

JSON object : View

Products Affected

google

  • android
CWE

No CWE.