CVE-2024-40659 allows for a local denial of service by permanently disabling the AndroidKeyStore key generation feature. This vulnerability resides in getRegistration of RemoteProvisioningService.java and stems from improper input validation. An attacker could exploit this without user interaction or special privileges, potentially affecting all installed apps.

While CVE-2024-40659 has a CVSS score of 5.5, its SOCRadar Vulnerability Risk Score (SVRS) is 30, indicating a relatively low level of immediate threat based on SOCRadar's vulnerability intelligence. However, the potential for permanent disablement of a critical security feature like the AndroidKeyStore makes this a significant concern. If successfully exploited, it could severely impact application security and data protection on affected devices. Mitigation is still recommended to prevent potential future escalation of risk or exploitation.