ZeroHour

CVE-2024-49731

CVSS 3.1
4.0 medium
EPSS
<1%p0
Published
()
Modified
Description

In apk-versions.txt, there is a possible corruption of telemetry opt-in settings on other watches when setting up a new Pixel Watch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Vendors
google
Products
android
Weakness
CWE-266
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

In the news

No ingested article mentions this CVE yet.