Unscored CVE-2023-21234 EUVD-2023-25402GHSA-c26w-x939-x27r

In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen …

Published Aug 14, 2023 · Updated Oct 9, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	13, 11	—

Advisories 3

WID-SEC-2024-0550 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 4, 2024
WID-SEC-2023-2841 Samsung Android: Mehrere Schwachstellen ermöglichen BSI CERT-Bund (WID) · Dec 5, 2023
WID-SEC-2023-1981 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 7, 2023

References

https://source.android.com/security/bulletin/wear/2023-08-01