Possible Permission Bypass Vulnerability in Multiple Locations
CVE-2024-40654
7.8HIGH
What is CVE-2024-40654?
A permission bypass vulnerability has been identified within the Android Settings app, exposing users to potential local escalation of privileges. This issue arises from a confused deputy scenario occurring in multiple locations within the app code. Exploitation of this vulnerability requires user interaction, emphasizing the necessity for awareness and caution while using or configuring Android devices. Updates and patches are crucial to mitigate these risks and preserve the integrity of user permissions.