Description


In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.

Related CPE's


o

google

android

4

Weaknesses



CWE-20

CVSS impact metrics


CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-14T20:15:13.477Z

2 years ago

Last modified

2024-11-21T06:42:33.807Z

1 year ago