CVE-2024-34741

HIGH

Android - Local Privilege Escalation via Lock Screen Visibility Logic Error

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-34741. PoCs published by uthrasri.

AI-analyzed exploit summary The repository contains a truncated Java file from the Android Open Source Project (AOSP) with no exploit code or technical analysis. It appears to be a placeholder or incomplete snippet.

Description

In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility settings are restricted by the user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Exploits (1)

nomisec STUB
by uthrasri · poc
https://github.com/uthrasri/CVE-2024-34741

The repository contains a truncated Java file from the Android Open Source Project (AOSP) with no exploit code or technical analysis. It appears to be a placeholder or incomplete snippet.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: Android Open Source Project (AOSP)
No auth needed
Prerequisites: None identified
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0015
EPSS Percentile 4.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-269 CWE-783
Status published
Products (4)
google/android 12.0
google/android 12.1
google/android 13.0
google/android 14.0
Published Aug 15, 2024
Tracked Since Feb 18, 2026