Is CVE-2024-31328 actively exploited?

No active exploitation of CVE-2024-31328 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-31328 be exploited remotely?

Partially. CVE-2024-31328 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2024-31328?

CVE-2024-31328 has a CVSS score of 8.8 (HIGH).

HOME VULNERABILITIESCVE-2024-31328

HIGH

CVE-2024-31328

CWE-693Published: March 2, 2026· Updated: Mar 6, 2026

8.8

CVSS v3.1

EPSS:0.07%probability of exploitation in 30 daysPercentile:20.7th

Official Description

In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

NVD Source

Technical Analysis

CVE-2024-31328 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.8.