Lucene search

GoogleOSV:ASB-A-300741186

HistoryFeb 01, 2024 - 12:00 a.m.

Green indicator permanently on

2024-02-0100:00:00

Google

osv.dev

green indicator

logic error

local escalation

privilege escalation

persistent dot

user interaction

exploitation

software vulnerability

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local escalation of privilege that fails to remove the persistent dot with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/frameworks/baseeq14

CPE	Name	Operator	Version
	platform/frameworks/base	eq	14

References

android.googlesource.com/platform/frameworks/base/+/d6f7188773409c8f5ad5fc7d3eea5b1751439e26

source.android.com/security/bulletin/2024-02-01