VDB
CISA-2024-0029
CISA-2024-0029
PUBLISHED
CVSS 7.1 HIGH
Reported by google_android · Published February 16, 2024
In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Scores
CVSS 3.1
7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Android | 13 | |
| Android | 13, 13 | |
| android | 0, 0 |
Timeline
- Feb 16, 2024 CVE Published
- Mar 14, 2025 CVE Updated