CVE-2024-43086

In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

PT-2024-30286 · Google · Android Accountmanager

Name of the Vulnerable Software and Affected Versions: Android AccountManager affected versions not specified Description: The issue is related to a confused deputy in the validateAccountsInternal function of AccountManagerService.java, which could lead to local information disclosure. This might...

CVE-2024-43086: Incorrect Default Permissions

In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

ASB-A-343440463

In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...