CVE-2024-0047

—

CVSS 3.1

5.5 medium

EPSS

<1%p4

Published

Mar 11, 2024 (Mar 11, 2024)

Modified

Jun 17, 2026

Description

In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. This could lead to local denial of service when policies are deserialized on reboot with no additional execution privileges needed. User interaction is not needed for exploitation.

Vendors: google
Products: android
Weakness: CWE-502
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.