Lucene search

China National Vulnerability DatabaseCNVD-2024-16882

HistoryMar 14, 2024 - 12:00 a.m.

Google Android elevation of privilege vulnerability (CNVD-2024-16882)

2024-03-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

google android

elevation of privilege

access_secure_service_from_temp_bond

keystroke injection

vulnerability

improper input validation

linux-based operating system

open source

google

cnvd-2024-16882

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from improper input validation in the access_secure_service_from_temp_bond method of the btm_sec.cc file, with one possible method for keystroke injection. An attacker can exploit this vulnerability to elevate privileges.