In multiple locations, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2024-49740 |
Exploitation
The vulnerability can be exploited locally without requiring any user interaction. An attacker can trigger the crash loop by exhausting system resources, leading to a denial of service condition.
Affected Products
- Android Framework: Vulnerable to resource exhaustion leading to crash loops.
- Telephony Services: Affected by the same resource exhaustion issues.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security patches provided by Android. Additionally, monitoring system resource usage can help identify and prevent potential denial of service conditions.