Lucene search

K
osvGoogleOSV:ASB-A-313428840
HistoryJun 01, 2024 - 12:00 a.m.

Missing permission checks in CompanionDeviceShellCommand.java

2024-06-0100:00:00
Google
osv.dev
4
companiondevicemanager
privilege escalation
user interaction

AI Score

7

Confidence

High

EPSS

0

Percentile

9.2%

In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

7

Confidence

High

EPSS

0

Percentile

9.2%

Related for OSV:ASB-A-313428840