CVE-2024-40650

2024-09-1100:09:17

google_android

github.com

frp bypass

wifi_item_edit_content

styles.xml

missing check

local escalation

privilege

no user interaction

AI Score

7.2

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "android",
    "versions": [
      {
        "status": "affected",
        "version": "14"
      },
      {
        "status": "affected",
        "version": "13"
      },
      {
        "status": "affected",
        "version": "12l"
      },
      {
        "status": "affected",
        "version": "12"
      }
    ],
    "defaultStatus": "unaffected"
  }
]