Denial of Service Vulnerability CVE-2024-7254 [401068466]

Assigned

Bug

Status Update

No update yet.

Description

sk...@gmail.com

created issue #1

Mar 10, 2025 03:40AM

Hi Team,

During the dependency scan, we have upgraded to the latest version, the Android repository dependency scan revealed a batch of high-risk vulnerabilities related to protocol buffer (CVE-2024-7254). These vulnerabilities were reported in Compose (Android UI Framework tool) related dependencies.Can I know when to fix these issues？

I'm looking forward to hearing your suggestions.

Best Regards,
Sky

6161421c-d61b-4b0c-a6b5-403f1fe7a10b.jpg

Restricted

58 KB

View

Download

Comments

za...@gmail.com <za...@gmail.com> #2Mar 17, 2025 09:21AM

I'm sorry screenshot names are all messed up, here is more explanation:

Thu Jul 07 2022 16:50:00 GMT-0700 (Pacific Daylight Time).png

error caused by not finding jdk properly (first error)

Thu Jul 07 2022 17:02:33 GMT-0700 (Pacific Daylight Time).png

error shown when i visit a JVM test

Thu Jul 07 2022 17:03:18 GMT-0700 (Pacific Daylight Time).png

studio jdk config UI

Thu Jul 07 2022 17:04:51 GMT-0700 (Pacific Daylight Time).png

result after workaround 2 where studio doesn't detect that ArrayMap extends Map

mn...@google.com <mn...@google.com> Mar 17, 2025 03:00PM

Assigned to je...@google.com.

Issue 401068466

Description

Issue summary

Comments

za...@gmail.com <za...@gmail.com> #2Mar 17, 2025 09:21AM

mn...@google.com <mn...@google.com> Mar 17, 2025 03:00PM

Add comment

Issue metadata