ASB-A-324321147 — Vulnetix

ASB-A-324321147 PUBLISHED

In rebootRecoveryWithCommand of RecoverySystemService.java, there is a possible way to bypass a factory reset due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	system/sepolicy	12, 14, *
platform	build/soong	15-next:0, 15-next, 15-next:0
platform	hardware/interfaces	15-next:0, 15-next, *
platform	frameworks/base	15-next:0, 15-next, 12

Timeline

Sep 1, 2024 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2024-09-01 advisory
https://android.googlesource.com/platform/system/sepolicy/+/92cbf8d4f18ccb2c488f50b7300bd6bfc33023aa patch
https://android.googlesource.com/platform/frameworks/base/+/8b7b2c66ca96d711fb364cbcc9d655197d9743e0 patch

Open in Interactive Console →