CVE-2024-44101

HIGH

Android - Remote Denial of Service via Null Pointer Dereference

Title source: llm
STIX 2.1

Description

there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0127
EPSS Percentile 79.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (1)
google/android
Published Oct 25, 2024
Tracked Since Feb 18, 2026