CVE-2024-23717

In accesssecureservicefromtempbond of btmsec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-23717

The Google Android operating system is vulnerable to a critical elevation of privilege (EoP) vulnerability. The issue stems from improper input validation in the access_secure_service_from_temp_bond method within the btm_sec.cc file, which could facilitate keystroke injection . An attacker can ex...