CVE-2024-43764
HIGHCVSS 7.8/10EPSS 0.08%
Last modified
CVE-2024-43764 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. EPSS estimates a 0.08% chance of exploitation in the next 30 days.
Description
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 13.0 | |
| Android | 14.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-43764?
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
How severe is CVE-2024-43764?
CVE-2024-43764 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.08% probability of exploitation in the next 30 days.
How do I fix CVE-2024-43764?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-43758Illustrator versions 28.6, 27.9.5 and earlier are affected b…7.8
- CVE-2024-43759Illustrator versions 28.6, 27.9.5 and earlier are affected b…5.5
- CVE-2024-4376The Premium Addons for Elementor plugin for WordPress is vul…5.4
- CVE-2024-43760Photoshop Desktop versions 24.7.4, 25.11 and earlier are aff…7.8
- CVE-2024-43762In multiple locations, there is a possible way to avoid unbi…7.8
- CVE-2024-43763In build_read_multi_rsp of gatt_sr.cc, there is a possible d…6.5
- CVE-2024-43765In multiple locations, there is a possible way to obtain acc…7.8
- CVE-2024-43766In multiple functions of btm_ble_sec.cc, there is a possible…6.5
- CVE-2024-43767In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, th…8.8
- CVE-2024-43768In skia_alloc_func of SkDeflate.cpp, there is a possible out…7.8
- CVE-2024-43769In isPackageDeviceAdmin of PackageManagerService.java, there…7.8
- CVE-2024-4377The DOP Shortcodes WordPress plugin through 1.2 does not val…5.4
Are you affected by CVE-2024-43764?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST