CVE-2024-40674

5.3 mediumEPSS 0.2%

Medium (5.3) in google android. EPSS 0.2% chance of exploitation in the next 30 days.

In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2025-01-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

https://android.googlesource.com/platform/packages/modules/Wifi/+/debc548ac085ba1ab0582172b97d965e9a1ea43a
https://source.android.com/security/bulletin/2024-10-01

Check your stack JSON