Home > Vulnerability Database > CVE-2024-43093

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2024-43093

Date: November 13, 2024

An elevation of privilege vulnerability exists in the Android Framework. There are indications that the following may be under limited, targeted exploitation.

Language: Java

Severity Score

7.3

Related Resources (7)

Url: https://android.googlesource.com/platform/frameworks/base/+/7f83c671626f9bf993581f4598c22482d87cba10

Url: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43093

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-43093

Url: https://source.android.com/security/bulletin/2025-03-01

Url: https://android.googlesource.com/platform/frameworks/base/+/67d6e08322019f7ed8e3f80bd6cd16f8bcb809ed

Url: https://source.android.com/security/bulletin/2024-11-01

Url: https://www.mend.io/vulnerability-database/CVE-2024-43093

Severity Score

7.3

Weakness Type (CWE)

Improper Privilege Management

CWE-269

Improper Handling of Unicode Encoding

CWE-176

CVSS v3.1

Base Score:	7.3
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Do you need more information?

Contact Us