CVE-2024-26131

Summary

CVE-2024-26131 is a vulnerability affecting Element Android, an Android Matrix Client. Versions 1.4.3 to 1.6.10 are at risk of intent redirection, enabling malicious apps to initiate internal activities with additional parameters. This issue potentially allows attackers to display arbitrary web pages, execute JavaScript, bypass PIN code protection, and even facilitate account takeover by launching a login screen to steal credentials. The vulnerability is resolved in Element Android 1.6.12, and no known workarounds are available to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.