CVE-2024-40660 – Android SurfaceFlinger Local Escalation of Privilege

CVE ID : CVE-2024-40660

Published : Nov. 13, 2024, 6:15 p.m. | 1 hour ago

Description : In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2024-40660 – Android SurfaceFlinger Local Escalation of Privilege