CVE-2024-40651
Published: 28 January 2025
Summary
CVE-2024-40651 is a high-severity Use After Free (CWE-416) vulnerability in Google Android. Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 9.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2024-40651 is a use-after-free vulnerability (CWE-416) caused by a logic error in the code within TBD of TBD. This issue affects the kernel and could lead to local escalation of privilege, requiring no additional execution privileges or user interaction for exploitation. The vulnerability has a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
A local attacker can exploit this vulnerability due to its low attack complexity and lack of privilege or user interaction requirements. Successful exploitation allows the attacker to achieve high impacts on confidentiality, integrity, and availability, resulting in kernel-level privilege escalation from an unprivileged user context.
The Android Security Bulletin provides details on mitigation, available at https://source.android.com/security/bulletin/2024-10-01.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-38748
Vulnerability details
In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for…
more
exploitation.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Kernel use-after-free vulnerability directly enables local privilege escalation from unprivileged context with no user interaction required.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Timely flaw remediation directly addresses the kernel use-after-free vulnerability by applying patches to prevent local privilege escalation.
Memory protection mechanisms such as ASLR, DEP, and guard pages comprehensively mitigate use-after-free exploits by preventing unauthorized memory access and manipulation.
Secure kernel configuration settings enable runtime mitigations like SMEP, SMAP, and KASLR that reduce the exploitability of the use-after-free vulnerability.