CVE-2024-43080

7.8 highEPSS 0.1%

High (7.8) in google android. EPSS 0.1% chance of exploitation in the next 30 days.

In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2024-11-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

https://android.googlesource.com/platform/packages/apps/Settings/+/26ce013dfd7e59a451acc66e7f05564e0884d46b
https://source.android.com/security/bulletin/2024-11-01

Check your stack JSON