Local Escalation of Privilege in Permissions Management for Android Devices

CVE-2024-49720

What is CVE-2024-49720?

A logic error in the Permissions.java file in certain versions of Android could allow unauthorized alterations to user location permissions. This vulnerability may enable local escalation of privileges without needing additional execution rights or user interaction, thereby compromising user privacy and control over location data.

References