Description
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.
Related CPE's
o
android
4
References
https://source.android.com/security/bulletin/2023-08-01
PatchVendor Advisory
https://source.android.com/security/bulletin/2023-08-01
PatchVendor Advisory
CVSS impact metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
5.5 · Medium
Information
Source identifier
Vulnerability status
Modified
Published
2023-08-14T20:15:13.477Z
2 years agoLast modified
2024-11-21T06:42:33.807Z
1 year ago