PT-2025-35620 · Unknown · Fusedaemon

Published 2025-04-01 · Updated 2025-09-03 · CVE-2024-49730

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to 2.3

Description The software contains a possible out-of-bounds write due to memory corruption in FuseDaemon.cpp. This issue could lead to local escalation of privilege without requiring additional execution privileges or user interaction.

Recommendations Update to version 2.3 or later.

Fix

LPE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ASB-A-284989074

CVE-2024-49730

Affected Products

Fusedaemon

References · 8

• https://osv.dev/vulnerability/ASB-A-284989074 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-49730 · Vendor Advisory
• https://source.android.com/security/bulletin/2025-04-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49730 · Security Note
• https://twitter.com/VulmonFeeds/status/1963087926025150724 · Twitter Post
• https://t.me/cveNotify/134150 · Telegram Post
• https://twitter.com/CVEnew/status/1963006707954557219 · Twitter Post
• https://android.googlesource.com/platform/packages/providers/MediaProvider/+/961c8cbd2a489277876aeffa40ebdee5eae29f1f · Note