CVE-2024-31316

State: PUBLISHED · Published: 2024-07-09 · Updated: 2025-03-13 · Assigner: google_android

Description

In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE

(none)

Affected

Google / Android — v=14 [affected]; v=13 [affected]; v=12L [affected]; v=12 [affected]

CVSS

(none)

References

https://android.googlesource.com/platform/frameworks/base/+/3457d82f8e265ad615b38f6a2aa3c33f1e100cb9
https://source.android.com/security/bulletin/2024-06-01

Source

cvelistV5-main/cves/2024/31xxx/CVE-2024-31316.json