Local Escalation of Privilege in Android Telecommunication Services

CVE-2024-40653

What is CVE-2024-40653?

A logic error in the ConnectionServiceWrapper.java files within Android's telecommunication services can allow unauthorized permission retention in the background. This vulnerability, which necessitates user interaction for exploitation, poses a risk of local escalation of privilege, potentially enabling attackers to gain elevated access without extra execution privileges.

References