[{"vendor":"google","product":"android","defaultStatus":"unknown","cpes":["cpe:2.3:o:google:android:12l:*:*:*:*:*:*:*","cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:*","cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:*","cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*"],"versions":[{"version":"12l","status":"affected"},{"version":"12.0","status":"affected"},{"version":"13.0","status":"affected"},{"version":"14.0","status":"affected"}]}]

{"timestamp":"2025-09-11T14:08:01.375028Z","id":"CVE-2024-34739","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Google","product":"Android","defaultStatus":"unaffected","versions":[{"version":"14","status":"affected"},{"version":"13","status":"affected"}]}]

OR
          *cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
          *cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*
          *cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
          *cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*

OR
          *cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
          *cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*

Android (associated with Google Inc. or Open Handset Alliance): https://source.android.com/security/bulletin/2025-05-01 Types: Vendor Advisory

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

https://source.android.com/security/bulletin/2025-05-01

https://source.android.com/security/bulletin/2024-08-01

https://source.android.com/security/bulletin/2024-08-01 Types: Not Applicable

NIST AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NIST NVD-CWE-noinfo

OR
     *cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
     *cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*
     *cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
     *cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*

https://android.googlesource.com/platform/frameworks/base/+/50e1f8f36e32928d10e72324c05a203a6db9f7fb No Types Assigned

https://android.googlesource.com/platform/frameworks/base/+/50e1f8f36e32928d10e72324c05a203a6db9f7fb Mailing List, Patch

https://source.android.com/security/bulletin/2024-08-01 No Types Assigned

https://source.android.com/security/bulletin/2024-08-01 Not Applicable

CISA-ADP AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA-ADP CWE-116

In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Android (associated with Google Inc. or Open Handset Alliance) https://android.googlesource.com/platform/frameworks/base/+/50e1f8f36e32928d10e72324c05a203a6db9f7fb [No types assigned]

Android (associated with Google Inc. or Open Handset Alliance) https://source.android.com/security/bulletin/2024-08-01 [No types assigned]