CVE-2024-49744

In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitatio...

PT-2025-2857 · Unknown · Accountmanagerservice

Name of the Vulnerable Software and Affected Versions: AccountManagerService affected versions not specified Description: The issue is related to a possible way to bypass parcel mismatch mitigation due to unsafe deserialization in the checkKeyIntentParceledCorrectly function of...