PT-2025-2590 · Google · Android Wificonfigurationutil

Published 2024-10-01 · Updated 2025-01-29 · CVE-2024-40674

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Android WifiConfigurationUtil (affected versions not specified)

Description A logic error in the code of WifiConfigurationUtil.java, specifically in the validateSsid function, could lead to a local denial of service due to a possible overflow of a system configuration file. This issue does not require additional execution privileges or user interaction to be exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ASB-A-343714914

CVE-2024-40674

Affected Products

Android Wificonfigurationutil

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-40674 · Security Note
• https://source.android.com/security/bulletin/2024-10-01 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-343714914 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-40674 · Vendor Advisory
• https://twitter.com/CVETracker/status/1884693182509703549 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1884351622093947393 · Twitter Post
• https://twitter.com/CVEnew/status/1884321782834029027 · Twitter Post
• https://android.googlesource.com/platform/packages/modules/Wifi/+/debc548ac085ba1ab0582172b97d965e9a1ea43a · Note
• https://t.me/cvedetector/16635 · Telegram Post