CVE-2024-47040CWE-416

Use After Free in the android.hardware.radio.sap.ISap/slot2 service

Critical · published December 18, 2024

CVSS v4.0
10.0
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00178 · 7.0th percentile
Weakness
CWE-416 · Use After Free
Published
2024-12-18T19:08Z
EPSS history
Timeline
  • 18 DEC 19:08Z
    Use After Free in the android.hardware.radio.sap.ISap/slot2 service
    cvelistv5