Description
In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SECURE_SETTINGS due to unsafe deserialization. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Android | 14, 13, 12L, 12 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 14 repositories · most starred shown
-
wqry085/PoC-Deployer-System ★ 94 · Oct 20, 2025
Quick tool for utilizing CVE-2024-31317 on Android
-
fuhei/CVE-2024-31317 ★ 66 · Dec 5, 2024
CVE-2024-31317
-
Anonymous941/zygote-injection-toolkit ★ 64 · Apr 17, 2025
A command-line utility to exploit Android Zygote injection (CVE-2024-31317)
-
WebLDix/CVE-2024-31317-PoC-Deployer ★ 57 · May 1, 2025
-
agg23/cve-2024-31317 ★ 32 · Apr 26, 2025
Detailed discussion of Zygote vulnerability CVE-2024-31317
-
CleoV2/Debuggable-App-Exploit ★ 13 · Nov 21, 2025
CVE-2024-31317 Debuggable App Exploit
-
fcy10012/CVE-2024-31317-Deployer ★ 6 · Dec 21, 2025
CVE-2024-31317 Android Zygote命令注入漏洞研究与部署工具 | Android 9-13 漏洞利用框架
-
rifting/Zygotroller ★ 5 · Aug 5, 2025
Remove Android profile owners/family link with CVE-2024-31317
-
vnescape/zygote-CVE-2024-31317 ★ 4 · May 29, 2026
This is a toolkit that uses CVE-2024-31317 to extract private app data via ADB or spawn a shell with an app's UID.
-
chengfeng30121/CVE-2024-31317-PoC ★ 2 · Mar 7, 2026
针对Android系统的CVE-2024-31317漏洞的概念验证脚本集合
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- WID-SEC-2024-1278 Android Patchday - June 2024: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 2, 2026