CVE-2024-49743: Android Framework Base Package Local Privilege Escalation Vulnerability
Summary
CVE-2024-49743: In multiple locations, there is a possible way to launch an activity from the background due to BAL Bypass. Affects platform/frameworks/base across 6 version ranges.
>= 12:0, < 12:2025-02-01
>= 12L:0, < 12L:2025-02-01
>= 13:0, < 13:2025-02-01
>= 14:0, < 14:2025-02-01
>= 15:0, < 15:2025-02-01
>= 15-next:0, < 15-next:2025-02-01
Fixed in 15-next:2025-02-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android Framework Base package is a core component of the Android operating system, providing essential functionalities for application development and system operations. It includes classes and methods that manage notifications, user interactions, and system services. This package is critical for maintaining the overall integrity and security of Android applications. However, it is susceptible to vulnerabilities that can be exploited to escalate privileges locally, potentially compromising the device's security.
Vulnerability Detail
The vulnerability identified as CVE-2024-49743 arises from a flaw in the Android Framework Base package, specifically related to the handling of background activities. This flaw allows an attacker to launch activities from the background without requiring user interaction, leading to a local escalation of privilege. The exploitation of this vulnerability can result in unauthorized access to sensitive information or system functionalities, posing significant risks to user data and device integrity.
How To Fix
Minimum fixed version
15-next:2025-02-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to keep their devices updated and monitor for any security patches released by the Android development team.
Conclusion
CVE-2024-49743 represents a significant security risk within the Android Framework Base package, allowing local privilege escalation through background activity launches. Users are encouraged to update their devices to the latest patched versions to mitigate this vulnerability and protect their data.
See every vulnerability recorded for platform/frameworks/base →
FAQ
CVE-2024-49743 is a vulnerability in the Android Framework Base package that allows local privilege escalation by launching activities from the background.
Exploitation of this vulnerability can lead to unauthorized access to sensitive information and system functionalities, compromising device security.
Yes, the vulnerability can be fixed by updating to the patched version of the Android Framework Base package, specifically 15-next:2025-02-01 or 12:2025-02-01.
If you cannot update your device, it is crucial to monitor your device for any suspicious activities and consider using security applications to enhance protection.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By utilizing the Vulert playground, you can check if your application is affected by this vulnerability without requiring any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
