The vulnerability CVE-2024-49624 affects smartdevth Advanced Advertising System versions up to 1.3.1 and involves deserialization of untrusted data, enabling object injection attacks. This can allow remote attackers to execute arbitrary code or manipulate application behavior without authentication or user interaction. The CVSS 3.1 base score is 9.8, reflecting critical impact on confidentiality, integrity, and availability with low attack complexity and no privileges required. No patch or official fix has been disclosed, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation of this vulnerability could lead to remote code execution or other severe impacts compromising the confidentiality, integrity, and availability of the affected system. Given the critical CVSS score and the nature of object injection via deserialization, attackers could fully control the affected application environment. No known active exploits have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting deserialization features if possible or applying application-level input validation to mitigate untrusted data processing. Monitor vendor channels for updates and apply patches promptly once available.