CVE-2024-40675 Information

Description

In parseUriInternal of Intent.java there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Reference

https://android.googlesource.com/platform/frameworks/base/+/c6b5490ec659b5854fd429f453f75de5befa6359 https://source.android.com/security/bulletin/2024-10-01