Medium severity5.3NVD Advisory· Published Jan 28, 2025· Updated Jun 17, 2026

CVE-2024-40674

Description

In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Android2 versions
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
- (no CPE)range: 14
Google/Wifillm-create

Patches

Vulnerability mechanics

References

source.android.com/security/bulletin/2024-10-01nvdVendor Advisory
android.googlesource.com/platform/packages/modules/Wifi/+/debc548ac085ba1ab0582172b97d965e9a1ea43anvdProduct

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000