CVE-2024-31328Disclosure(google / android)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

google CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-693

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

android

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-03-05); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

google

Products

android

2 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CRAC Learning - Tech@cracbot216d
Disclosure
CVE-2024-31328 (CVSS:8.8, HIGH) is Modified. In broadcastIntentLockedTraced of http://BroadcastController.java, there is a possible way to launch arbitrary activities from ..https://nvd.nist.gov/vuln/detail/CVE-2024-31328 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2024‑31328, noting its high severity and a potential exploitation vector, but offers no PoC, exploit code, patch, or evidence of active use.
0000058
173 followersView on X
CRAC Learning - Tech@cracbot217d
Disclosure
CVE-2024-31328 (CVSS:8.8, HIGH) is Analyzed. In broadcastIntentLockedTraced of http://BroadcastController.java, there is a possible way to launch arbitrary activities from ..https://nvd.nist.gov/vuln/detail/CVE-2024-31328 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2024-31328 with a high CVSS score and outlines a potential arbitrary activity launch in BroadcastController.java, but provides no PoC, exploit code, active exploitation evidence, or patch information.
0000044
173 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	google	android	14.0	-	-
OS	google	android	16.0	-	-

Explore more

Back to dashboard google CVEs android vulnerabilities