In CompanionDeviceManagerService there is a lack of Parcelable value check which could lead to bypass of BAL restriction

In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.