CVE-2024-20026 — Sensitive Information Exposure in Google Android

3 documents3 sources
Severity
4.2MEDIUMNVD
EPSS
0.0%
top 98.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedMar 4

Description

In da, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541632.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:LExploitability: 0.8 | Impact: 3.4

Affected Packages2 packages

▶NVDgoogle/android12.0, 13.0, 14.0+2

🔴Vulnerability Details

1
GHSA
GHSA-cfwx-rw48-864r: In da, there is a possible information disclosure due to improper input validation↗2024-03-04
▶

📋Vendor Advisories

1
Android
CVE-2024-20026: da↗2024-03-01
▶