CVE-2024-31328

creationtimestamp| type| source ---|---|--- 2026-03-04 17:33:08+00:00| seen| https://infosec.exchange/ap/users/116075764941463905/statuses/116172099351319206...

CVE-2024-31328

In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2024-31328

A logic error in the broadcastIntentLockedTraced function of BroadcastController.java within the Framework component of Google Wear OS allows an attacker to launch arbitrary activities from the background on a paired companion phone. This vulnerability can lead to local escalation of privilege wi...