Skip to content
OpenAdvisories
High · 7.8 CVE-2024-31310 EUVD-2024-29206GHSA-m28q-fx99-4vr5

In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service app in the Autofill…

Published Jul 9, 2024 · Updated Mar 27, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service app in the Autofill service settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 14, 13, 12L, 12 —

Advisories 1

References